Static task
static1
Behavioral task
behavioral1
Sample
b210594bc486a2e12510098f6eac1196_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b210594bc486a2e12510098f6eac1196_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b210594bc486a2e12510098f6eac1196_JaffaCakes118
-
Size
10KB
-
MD5
b210594bc486a2e12510098f6eac1196
-
SHA1
ccd2d351f865130ce7654f258b6b5ae7296cd0ab
-
SHA256
dfb336f1dd44227188789ce0a7afd2189a078e59137d4c8aa0b1f3f230a4731a
-
SHA512
a8964f4336c8b50d03c49e1710a1298721dd595af39f9ca3c31f79513f60cb64fa47e79a38b0ec1137719f46f0c973d4d0977566cc9e4c9646a0841dd457ddfe
-
SSDEEP
192:ohWzJ6Cx+XhqW4jSpZhbNaBOAUGueRWP:ohlC2zNYuekP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b210594bc486a2e12510098f6eac1196_JaffaCakes118
Files
-
b210594bc486a2e12510098f6eac1196_JaffaCakes118.exe windows:4 windows x86 arch:x86
9b821a35d20f9a8955f8d5e54b175675
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 862B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 213B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE