Static task
static1
Behavioral task
behavioral1
Sample
b0c9825a7fd074167061a4018ce79534_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b0c9825a7fd074167061a4018ce79534_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b0c9825a7fd074167061a4018ce79534_JaffaCakes118
-
Size
59KB
-
MD5
b0c9825a7fd074167061a4018ce79534
-
SHA1
dcf9a35bf1e60b66556a8fd4a261652d383b4e50
-
SHA256
e152f964adbdfdcf31248c9137f6c8c7416683203fbfca9531dd2cdb403afbbc
-
SHA512
f7af442ecefae2cb78f904b341361d2c85f10c1eb048e3135a5185183c0f10df19a61bb1bb180edff28bffd333f891237a967f8c805023d649e3d072ff959788
-
SSDEEP
768:TA1GY6lZizSmNaa/q5cHhZPDYxf5Pb5FxlbsKoEbaGI9e5/nzfg2Jydd/:2ylZTLaQcHhxDYxfB55bUG1n7idd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0c9825a7fd074167061a4018ce79534_JaffaCakes118
Files
-
b0c9825a7fd074167061a4018ce79534_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 49KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE