Static task
static1
Behavioral task
behavioral1
Sample
aad5252652e17c14c514b8309d694d08_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aad5252652e17c14c514b8309d694d08_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aad5252652e17c14c514b8309d694d08_JaffaCakes118
-
Size
431KB
-
MD5
aad5252652e17c14c514b8309d694d08
-
SHA1
5a99232a010ea4d3fd5532b3a0893e71e14b1b55
-
SHA256
2973e5bcae43ff980b46b37f38867761b14db37c2f394bfbe469f837e8e6af42
-
SHA512
083bb70537ee2c732ead181f45568064237006ed9a451e30db1fb831f4387220192001689637b4f0825a661f7373e0ba8bf027bbed4afa2634a57d91504dca3e
-
SSDEEP
12288:26YOIcJ+pmb5xrn9I9JpUsQSnrgKwke0BMU8fy0X:26VIc2iv9o0sQ0rgKW0iUhA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aad5252652e17c14c514b8309d694d08_JaffaCakes118
Files
-
aad5252652e17c14c514b8309d694d08_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 86KB - Virtual size: 396KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE