Static task
static1
Behavioral task
behavioral1
Sample
ac8467d1271f0aeae774ec5a82df3ef1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ac8467d1271f0aeae774ec5a82df3ef1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ac8467d1271f0aeae774ec5a82df3ef1_JaffaCakes118
-
Size
18KB
-
MD5
ac8467d1271f0aeae774ec5a82df3ef1
-
SHA1
dfa907085b0ca9660e09867ef4b363b53158619d
-
SHA256
9fb2e500171584be8e48ceb83417e3ab6af3c331a8c0b27c793e05fbe699e093
-
SHA512
2864c25a487f628d5eef09e7649d7245c0d637deed153b39b8aaeeaf6146baf5977198eff8028b7699517a9ab6930920bd5af65eb0338e6e69ef97cab461caca
-
SSDEEP
384:K9/doPXFpOIvB27EUFukK9tHOFux9nljTRYlNUoMPExyDFcf:tDJvs7CpOs9V90NUO6Fcf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac8467d1271f0aeae774ec5a82df3ef1_JaffaCakes118
Files
-
ac8467d1271f0aeae774ec5a82df3ef1_JaffaCakes118.exe windows:4 windows x86 arch:x86
807d4dbf88522aca43243ab895fbef96
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32.dll.
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
Sections
.text Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE