Static task
static1
Behavioral task
behavioral1
Sample
af12d9ad2261792f5f84dcb0f2c151d2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
af12d9ad2261792f5f84dcb0f2c151d2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
af12d9ad2261792f5f84dcb0f2c151d2_JaffaCakes118
-
Size
72KB
-
MD5
af12d9ad2261792f5f84dcb0f2c151d2
-
SHA1
19f6b460550cc6905d1177b64cd7de5a77237e80
-
SHA256
9601e8cc242d0d157857965aad1e30ee77e2ee64a7ab4052d8465c9e2f39dcae
-
SHA512
55a81be7a33f003f51f0ad2d5b7c8bc5f365cd2fca75bbef29b48a38a0c720b9c4b9eb6e835e021fba39314922a74482153f70f70e17f726397c6ea4aea15f7e
-
SSDEEP
1536:3MMwHn8K2AI/Fn7UEXEUuVQ7z/+NUrF2uHRkM4jhVy3Eq67W:a+1Fn71UY7zG6rF2uxkMmze6W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af12d9ad2261792f5f84dcb0f2c151d2_JaffaCakes118
Files
-
af12d9ad2261792f5f84dcb0f2c151d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 67KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE