Static task
static1
Behavioral task
behavioral1
Sample
a378475c80dce9bce836ab363d6499ba_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a378475c80dce9bce836ab363d6499ba_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a378475c80dce9bce836ab363d6499ba_JaffaCakes118
-
Size
16KB
-
MD5
a378475c80dce9bce836ab363d6499ba
-
SHA1
1f1f1f706ce7e0a3a514e391ba56df352f912d18
-
SHA256
fa2d5d5424e7e49ace5d388d0563fbb60a11afa96853cbae2adc2a535773c2af
-
SHA512
6be2fad5b861aa200468e7fd0215ad6e852ff3103b1204935338503a2561b9aedcae22dfba91acd2d5993015b88b20ee0f8816c423f7a070b30a2f840a6f4526
-
SSDEEP
384:CwxFz66WAVDoG9LG16gZLZYJ5GOLPH1SiVRPlZjNLFx64:C8ctAtBQ16CZYfGOoKPFxf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a378475c80dce9bce836ab363d6499ba_JaffaCakes118
Files
-
a378475c80dce9bce836ab363d6499ba_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 12KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE