Static task
static1
Behavioral task
behavioral1
Sample
ae3e75415ffa153175c92ffed7714082_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ae3e75415ffa153175c92ffed7714082_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ae3e75415ffa153175c92ffed7714082_JaffaCakes118
-
Size
130KB
-
MD5
ae3e75415ffa153175c92ffed7714082
-
SHA1
dfa55115b011d07a672ed8fdaa8a8ad6508ca15d
-
SHA256
6762b415379295b67a11bf1395400130b2904d4c05d35338e3ff713c147de682
-
SHA512
4b45ad5b48d6a6cd27d73723faba5a961a99c718a04f125dd803fe42b27265a09fe8036d95436f3dc09b75e829cb35c1f7075d66e0d7ccff8f44a5b5e54eb7bc
-
SSDEEP
3072:t0lDokykNbA1BiN336MdMfLirDIXa1i/NU8bOMYcYYcmy5Zxhf:tGmMbA1BcqqULirD2Ei/NjO5Vxh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae3e75415ffa153175c92ffed7714082_JaffaCakes118
Files
-
ae3e75415ffa153175c92ffed7714082_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 11KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE