Static task
static1
Behavioral task
behavioral1
Sample
aaaa107bf0a971edf0f3f4a30ed09b9f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aaaa107bf0a971edf0f3f4a30ed09b9f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aaaa107bf0a971edf0f3f4a30ed09b9f_JaffaCakes118
-
Size
163KB
-
MD5
aaaa107bf0a971edf0f3f4a30ed09b9f
-
SHA1
a455cde326bb1ff386f3d01a7a9db94a43b1e16e
-
SHA256
bb43e65fd77aa22aeb32121866c010f39e42bcf087b7425c9242829e677f4db4
-
SHA512
5f4c154338223d1906cbd395bc3621c1cb75485fb157d1c52c4c0fa0746d325c07e754d654c862f82fc5c5308ad879bf7796d4edf35cd550fbad59252a7ebe97
-
SSDEEP
3072:mnp9W5ZYOncA7ffGL5vApUKQ3Vgna3LqMXOA4QUgX7:mnp9W5Z3nX7G1IpsxXN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aaaa107bf0a971edf0f3f4a30ed09b9f_JaffaCakes118
Files
-
aaaa107bf0a971edf0f3f4a30ed09b9f_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 76KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 87KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE