Static task
static1
Behavioral task
behavioral1
Sample
b424272367578c9b030f245597ca5aab_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b424272367578c9b030f245597ca5aab_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b424272367578c9b030f245597ca5aab_JaffaCakes118
-
Size
22KB
-
MD5
b424272367578c9b030f245597ca5aab
-
SHA1
4e1b07f4b0724819f58a5b2ccaeae8aa8660f3c0
-
SHA256
9c9d603d2f28c9b6d594248bc0d012c9a82eb7fe3aab35068787b1f821529b9a
-
SHA512
27d9f719e4768eefe4f8d314c7c5081f8f83d286bb50db1996ddf0db21e0058f4387dc799acfff883e7d0d2254dc27c1f3c7340f4793b6a2c5db91dea3e0a1d7
-
SSDEEP
384:ZDXb2gDqaT7LHFfC+AlPyvQzILNDlNvcmgmG0VSlW7yTVQq45D:ZDrJ7T7LlqQQzynemGrlFWZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b424272367578c9b030f245597ca5aab_JaffaCakes118
Files
-
b424272367578c9b030f245597ca5aab_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 16KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE