Static task
static1
Behavioral task
behavioral1
Sample
8ef91268efc85eef3219a149e9aaad5d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8ef91268efc85eef3219a149e9aaad5d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8ef91268efc85eef3219a149e9aaad5d_JaffaCakes118
-
Size
867KB
-
MD5
8ef91268efc85eef3219a149e9aaad5d
-
SHA1
789cb4713c9516407f9bc5bb2e610e3a40cf7e5d
-
SHA256
40d2f2e2789f3cc668c8ed7d94faaa54fa6e92b2f34e062b38fa2ddaf18dd62e
-
SHA512
2c2ae4414ca2e49c55e40ca0c92872e0614c95d6d37e4741c54c46e7756662c3aeff918f4ea6d3ee0f72eb21d0ffd1f896dd99e09939f47bd0ce0249a8df195e
-
SSDEEP
24576:eB2exyPuGFAbYQBu5s1iFTYeApCejOT//hkAbir:MHxyPuGFAbYQBusiG+f/Tir
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ef91268efc85eef3219a149e9aaad5d_JaffaCakes118
Files
-
8ef91268efc85eef3219a149e9aaad5d_JaffaCakes118.exe windows:4 windows x86 arch:x86
cdb001dd17379dd4ff362cfb9c51f3c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
msvbvm50
ord582
Sections
pec1 Size: 102KB - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pec Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE