Static task
static1
Behavioral task
behavioral1
Sample
a708c022a20748be6e78036c193b7dda_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a708c022a20748be6e78036c193b7dda_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a708c022a20748be6e78036c193b7dda_JaffaCakes118
-
Size
52KB
-
MD5
a708c022a20748be6e78036c193b7dda
-
SHA1
d981bd593f10e0f0c7a334b377d6a39d323c3969
-
SHA256
07a18a3c76156a6257e4abb6178e6f23181435eefbc9ba3d612cd59cfb4c0284
-
SHA512
0f438647367b907943d3ba29a997ed2baa0b32a0d7cdf09150e1a76128ce97c457ba8b878790dfde8c7eb35b9b3008b018ed5d0adbec6073dc6f904c7efec2ff
-
SSDEEP
1536:fE2GkQsiotVcSuc3hp4GokK4v47uUXLbW:nGwi4V5T4Q4yAbW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a708c022a20748be6e78036c193b7dda_JaffaCakes118
Files
-
a708c022a20748be6e78036c193b7dda_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 48KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE