Static task
static1
Behavioral task
behavioral1
Sample
b09b4c3e321a2bcead1837acbd3de01f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b09b4c3e321a2bcead1837acbd3de01f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b09b4c3e321a2bcead1837acbd3de01f_JaffaCakes118
-
Size
302KB
-
MD5
b09b4c3e321a2bcead1837acbd3de01f
-
SHA1
82940f8553813d407c72da3d72ee75129818bd88
-
SHA256
eed739b5a6f85f516612e3aaaa1fc7ff2662ed581c115563b405e7f01193ebe9
-
SHA512
bb654f5e4a2eac0274b05e04be1d5a4cb0e924a7a564e3601925b94c7d8a2d2ec51e4d26cc008a11c1d329861a73547285006ac640d6a874943fe361f8c143fc
-
SSDEEP
6144:mf7+9N6U/+ccD4ltD76uIxSgx08eWTGvy2u9v4JEtyAGQNS:maNTltJIxSgx08FTkAGQN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b09b4c3e321a2bcead1837acbd3de01f_JaffaCakes118
Files
-
b09b4c3e321a2bcead1837acbd3de01f_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
Size: 278KB - Virtual size: 644KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 12KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE