Static task
static1
Behavioral task
behavioral1
Sample
a12302111ec727d73c912fe7d398fd43_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a12302111ec727d73c912fe7d398fd43_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a12302111ec727d73c912fe7d398fd43_JaffaCakes118
-
Size
68KB
-
MD5
a12302111ec727d73c912fe7d398fd43
-
SHA1
3f295e3c456302713afcbc8bfa5dd8b7a9ac1b02
-
SHA256
b98ddbfcbfe9af72a5640cfee0f5a397b19da3d8b018ffc598bf8525add6ac77
-
SHA512
81ef24df7dd71b6e6d2464b2f6920ee904aec5345ec2380a2aa60a5b4e3172b2c9215406e3ae72a9ca38350899b39b7b443767e6ec09b12c098238e009238d89
-
SSDEEP
768:JQwdMQWlwFb3MRGFpgf7ie0D8nm3dBBwe6wiwU0HjvkI60bmyGG2SPk0AVyxB/8e:xXsGTuOh88ae6wx1fi5S8XAhlQ/Q6d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a12302111ec727d73c912fe7d398fd43_JaffaCakes118
Files
-
a12302111ec727d73c912fe7d398fd43_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 52KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE