Static task
static1
Behavioral task
behavioral1
Sample
b0cabc0247dd19d6a76bc766b178fa9f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b0cabc0247dd19d6a76bc766b178fa9f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b0cabc0247dd19d6a76bc766b178fa9f_JaffaCakes118
-
Size
22KB
-
MD5
b0cabc0247dd19d6a76bc766b178fa9f
-
SHA1
50dc26bd475f65bccab882422f85d84074cd82d5
-
SHA256
5f7eee4d3ed249d10ba8fb0efb20fcfc0997bd0b4e56cda1a90c3dcd61540fbe
-
SHA512
aef8930a0c8e97f057b976afa165513d6d82dcd63006aa68addc037a66aac934afea93ce3989892117714896ececb9e92f7f2407311d765dcc99efe57e37646c
-
SSDEEP
384:6OWmg47+aSm9WAVAcRFYHTiS+NvsEOX3du5o4Ayfh1DVsGvGgq4Z/qLl:63m7SmvVXQHT6vgHd7Mh153z5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0cabc0247dd19d6a76bc766b178fa9f_JaffaCakes118
Files
-
b0cabc0247dd19d6a76bc766b178fa9f_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 16KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE