Static task
static1
Behavioral task
behavioral1
Sample
b84efa595a5f88b43361d61ece726584_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b84efa595a5f88b43361d61ece726584_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b84efa595a5f88b43361d61ece726584_JaffaCakes118
-
Size
398KB
-
MD5
b84efa595a5f88b43361d61ece726584
-
SHA1
54a8ce685a8c4a12683cf9bad74482d3cdc9c537
-
SHA256
b65fa1484009f34be05d728418e89be4a67061721d48d9824758add4b219a3e4
-
SHA512
c7e495443c7b0c89e0590554e1b0f85214e7cd6d1415f5dbc80c3d90da580c17df0a821d8c4c3b5e376afe5b36248f8cfe1e5254986e8c47c7292685cb783fa5
-
SSDEEP
6144:ihGwY1/D1jnrr03aMjnZCqZBgs3bkSMRmGG6MvsjsGSuOWObCX2oys2:iIwY1lrM3jncqDbkq1sjs7ug5oys2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b84efa595a5f88b43361d61ece726584_JaffaCakes118
Files
-
b84efa595a5f88b43361d61ece726584_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 391KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE