Static task
static1
Behavioral task
behavioral1
Sample
b3119a49ba31b0908295c5d0979bf98e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b3119a49ba31b0908295c5d0979bf98e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3119a49ba31b0908295c5d0979bf98e_JaffaCakes118
-
Size
56KB
-
MD5
b3119a49ba31b0908295c5d0979bf98e
-
SHA1
a64b0bc274b5c172de299112fee77ed809f29650
-
SHA256
5acf99c82b10f09265f36057b120fd4d4c318b5a5bd8d0dc67d5da32357bbf36
-
SHA512
fb9e49aa7fe5aef11a8dd10d831a366863980ce18a3bcb8d7810fb3c466866e0b0c0011feeb63646be696cab82bcde248de9af9939e25b1fc1986975d8950e5b
-
SSDEEP
1536:JqzFj6iDBntRpQaL3QTaWWZnxhYhIdVTz:Ja6iDBnFQ+3QeznX7jTz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3119a49ba31b0908295c5d0979bf98e_JaffaCakes118
Files
-
b3119a49ba31b0908295c5d0979bf98e_JaffaCakes118.exe windows:4 windows x86 arch:x86
bf61fd0c4995f52e6502284e50c39e02
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
VirtualAlloc
VirtualProtect
VirtualFree
Sections
.df Size: - Virtual size: 356KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.df Size: 56KB - Virtual size: 60KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE