Static task
static1
Behavioral task
behavioral1
Sample
8d075fc515fdee81c202bd53338bca0e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8d075fc515fdee81c202bd53338bca0e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8d075fc515fdee81c202bd53338bca0e_JaffaCakes118
-
Size
55KB
-
MD5
8d075fc515fdee81c202bd53338bca0e
-
SHA1
777d36f024d489ee370e68a0ae263c4bd0f3f49e
-
SHA256
07a43f60b6e2ebfc9bd9f9a08dc5ecfcc780f8cbf9592910c845a79d1925627d
-
SHA512
f8314ad46331246489343f0396d1c8a2e5b16abcb5e598351f154229a2643e9878218824bda5861b5eb939e37fa07c1148b88bf92464b520dab1c8fa8bb175f0
-
SSDEEP
768:3Dvnx7vMkoIDFjYJZarQyI8fzGpNDctUapUNKMzsIpdfgo5bpqfc/pQlNoUHJvqz:TvnlvkQhKwrB1fzG1apXi5cfYQleUHsz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d075fc515fdee81c202bd53338bca0e_JaffaCakes118
Files
-
8d075fc515fdee81c202bd53338bca0e_JaffaCakes118.exe windows:4 windows x86 arch:x86
4c0c4f68eff15cf5001f6952dc85cb0c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
VirtualAlloc
VirtualProtect
VirtualFree
ws2_32
socket
Sections
.dcv Size: - Virtual size: 296KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dcv Size: 54KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE