Static task
static1
Behavioral task
behavioral1
Sample
ac57a5a7dab940e01f200b6bc34350f6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ac57a5a7dab940e01f200b6bc34350f6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ac57a5a7dab940e01f200b6bc34350f6_JaffaCakes118
-
Size
217KB
-
MD5
ac57a5a7dab940e01f200b6bc34350f6
-
SHA1
8a027a6e18d3d8815f7d1615930d895e48af7280
-
SHA256
50a2b4ab13e8afe5d7b64c0257d12b67685970420d3c0bdd440e0c480f76448c
-
SHA512
7241f1de4400e3e9c96d72e7eedbbebd5990fbebb86649e2bf3eb83d972b5ff2845f622bd66a743be61248503b95d33dcabb85f7da0a7c82e782865dad588a74
-
SSDEEP
1536:UJNPvNJNPvNJNPvNJNPvNJNPvNJNPvNJNPvNJNPvNJNPvNJNPvNJNPvNJNPvNJNa:6BBBBBBBBBBBBBBBBBBBBBBBBBBBBc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac57a5a7dab940e01f200b6bc34350f6_JaffaCakes118
Files
-
ac57a5a7dab940e01f200b6bc34350f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE