Static task
static1
Behavioral task
behavioral1
Sample
a36478dd8abb457c66b14d7c1fab59c6_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a36478dd8abb457c66b14d7c1fab59c6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a36478dd8abb457c66b14d7c1fab59c6_JaffaCakes118
-
Size
467KB
-
MD5
a36478dd8abb457c66b14d7c1fab59c6
-
SHA1
81b5ebe8ce7c091fd81e3393bb332103046b7490
-
SHA256
2b47f343cfccc89be7268e3c70ca36be6a44dd5f3e0dad32216cfbfcee0a247b
-
SHA512
7d1451a601a4a5389558fa69c6a4dd75827e3ace2fa860b27242b6668baac5a9eb80c007bcda9d9ec661e38bdd3c7d3363bd5e35abacbe6d4a32c58f15305b6d
-
SSDEEP
6144:UAFdoSc87lmrhd2h6vQLCToMqyNHi0gGQEbUvW/e/gqzb2IsMnYwmXmNFB0lLcrd:UA4HQmZQLC0XyNFze/vbPsMYwmcrBoI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a36478dd8abb457c66b14d7c1fab59c6_JaffaCakes118
Files
-
a36478dd8abb457c66b14d7c1fab59c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 440KB - Virtual size: 520KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE