Static task
static1
Behavioral task
behavioral1
Sample
a0bdd3d5f22c92614fe81f81e0409c3e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a0bdd3d5f22c92614fe81f81e0409c3e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a0bdd3d5f22c92614fe81f81e0409c3e_JaffaCakes118
-
Size
162KB
-
MD5
a0bdd3d5f22c92614fe81f81e0409c3e
-
SHA1
fa06edfb669eb4e800907290dc122789e13bd415
-
SHA256
ad58c19504c4ae84deaa609bf1b0daed4f1c60b0145884b170f8aa777ac761fc
-
SHA512
809cbaa176a2639d99f223e1c2546ec38f2ded43972f77088861fbd06afc2f9928737590afb7da2924729dd648f5f70c99090e16edc0cc871ea20fed3a92bf86
-
SSDEEP
3072:qRrgLBWT2rfahTYFvOFKbWQyz7QfsPt7JeNzrv3/B5N7S2J/2Zrdm:1ATYahTY62WQDfsPt7w33/d9oZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0bdd3d5f22c92614fe81f81e0409c3e_JaffaCakes118
Files
-
a0bdd3d5f22c92614fe81f81e0409c3e_JaffaCakes118.exe windows:4 windows x86 arch:x86
7ff4c0bf321014ece3e5e94e7edae5b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
FreeLibrary
EnterCriticalSection
LoadLibraryA
LeaveCriticalSection
GetProcAddress
Sections
.text Size: 161KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE