Static task
static1
Behavioral task
behavioral1
Sample
8ef120d4334ffc39bbdac816d0da2631_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8ef120d4334ffc39bbdac816d0da2631_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8ef120d4334ffc39bbdac816d0da2631_JaffaCakes118
-
Size
63KB
-
MD5
8ef120d4334ffc39bbdac816d0da2631
-
SHA1
0c821b3386c4b29e928e31529a940c3128658b10
-
SHA256
69cad2936ac3e5dc65a2f5d925fa7fac88687d841671e1c4675f8c7df70727f6
-
SHA512
919dc096d2626ffae6b1687d63f7fb4f96cbe7eb325763f41f78c5a7aa1a1d329fa3b499311e8078855f6e2bed5ab896c6181787f8e5baba1bc2c3d6617263b0
-
SSDEEP
1536:FXWbOC1cSUmHxKa2fCv3FxPoY3+0OH1q7Y/Hj:FsO2cS1bHgi+0zU/D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ef120d4334ffc39bbdac816d0da2631_JaffaCakes118
Files
-
8ef120d4334ffc39bbdac816d0da2631_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
0 Size: 57KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE