Static task
static1
Behavioral task
behavioral1
Sample
aef212c07722bc827f71d6c87f510b83_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aef212c07722bc827f71d6c87f510b83_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aef212c07722bc827f71d6c87f510b83_JaffaCakes118
-
Size
142KB
-
MD5
aef212c07722bc827f71d6c87f510b83
-
SHA1
a21863d1653a8677d417b83d8eee413c9e7b33c2
-
SHA256
d0dcca6ae3cf9728c4127815c549e8cf39d2112e6f07703fadd1581f2df19427
-
SHA512
45e2158fa7053686eb5dfa788d0c463cdef2f6bef319de1e318e16b63061a1b6195e73cb4d050bfa4cadb46d4781796b89eeca1dfb1cbfe3ec0cc429b440133d
-
SSDEEP
384:nWn7ZkAYJcew4Y1KA4ht3BoxcdK5kLKesjcW2/9WWub7l53rKtF5wO8bGJ:nWn7ZkAY6l+3BSaLLKesjLMSlUeOdJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aef212c07722bc827f71d6c87f510b83_JaffaCakes118
Files
-
aef212c07722bc827f71d6c87f510b83_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE