Static task
static1
Behavioral task
behavioral1
Sample
a0f0db848bc736eef66b075170c5aa82_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a0f0db848bc736eef66b075170c5aa82_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a0f0db848bc736eef66b075170c5aa82_JaffaCakes118
-
Size
828KB
-
MD5
a0f0db848bc736eef66b075170c5aa82
-
SHA1
abd485eebd5aab423176cd1626c4c571ff8dec5e
-
SHA256
670099055641ba0660ed78a0140bd1f8a238e6eb25a547e4c098fd42a863137f
-
SHA512
bc353edb3720125999630b89b8d0ae7106dd44351f9115c48be6259bfa38427c707b8bfe6c6f387e1ffc9bdbb6241a7d548207585c4086336b9c1abfb4c8f8c3
-
SSDEEP
12288:GHul9dbH2jlZ0PGJ2/CVuUVdB+o7GBnR/H8H7dM+JvLX34FE3E73UUa6TLCIO8Ru:GHm9FH2jD0uJ2aEUU/H4+7FE4lTLC34u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0f0db848bc736eef66b075170c5aa82_JaffaCakes118
Files
-
a0f0db848bc736eef66b075170c5aa82_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 797KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE