Static task
static1
Behavioral task
behavioral1
Sample
a74be690fc98dec1b9bb4e0d6a02cc5e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a74be690fc98dec1b9bb4e0d6a02cc5e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a74be690fc98dec1b9bb4e0d6a02cc5e_JaffaCakes118
-
Size
18KB
-
MD5
a74be690fc98dec1b9bb4e0d6a02cc5e
-
SHA1
b803671722cdacde0b00e090d703b9178f986340
-
SHA256
0b97bf770d68013109bcd062279a138f29d46dbbda94e46c1cb8410ccdf01b12
-
SHA512
2f4e651a2b5aea57424600f7e7c464ed41ab51f59162dd3f3233b1fcb1ffb60dcd6e55f8fa2c109eef40791996221361cb8e17837f422ab6dc1d4f3db4cf6274
-
SSDEEP
384:EfSEMEP2MEFMENdAWFIeKWLysZp6IHLfCyPgtr56t:QME+MEFMENd7vK0GIDCyPUN2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a74be690fc98dec1b9bb4e0d6a02cc5e_JaffaCakes118
Files
-
a74be690fc98dec1b9bb4e0d6a02cc5e_JaffaCakes118.exe windows:4 windows x86 arch:x86
aa77d18b40072a7e1dc36630aafffd27
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
VirtualProtect
Sections
.fefsfd0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fefsfdf Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE