Static task
static1
Behavioral task
behavioral1
Sample
aa9af692c6553ba3ba944eb9dedf67cc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aa9af692c6553ba3ba944eb9dedf67cc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa9af692c6553ba3ba944eb9dedf67cc_JaffaCakes118
-
Size
44KB
-
MD5
aa9af692c6553ba3ba944eb9dedf67cc
-
SHA1
87b502f4e0bf118fe36cc9f7a4788f451dbe2c1b
-
SHA256
f6b700ce3dee3735ed4a3808f4e47c0f2c297b4a829526c778aff7491563bbe0
-
SHA512
871b2c66cbaf351eb1799f26d1249b664cfe4733a0faecb3d3ad60e10c0d32a37ffb7e60a8c86aa35691c9c4604701986b494b9f00b34c9181f73e311e21553a
-
SSDEEP
768:wWcQzvcBNTF5eeq+fLSoBdcmgZ1Fz0LCj+4j8Im995pSICwygyAPVDsWshXGL0uf:LLcNToKdFgZ1F7j66Xa0uu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa9af692c6553ba3ba944eb9dedf67cc_JaffaCakes118
Files
-
aa9af692c6553ba3ba944eb9dedf67cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.BRD Size: 33KB - Virtual size: 528KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BRD Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE