Static task
static1
Behavioral task
behavioral1
Sample
b8588a94d2f93d0833da49676fcce001_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b8588a94d2f93d0833da49676fcce001_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b8588a94d2f93d0833da49676fcce001_JaffaCakes118
-
Size
17KB
-
MD5
b8588a94d2f93d0833da49676fcce001
-
SHA1
730440baefa55751af1b35f05a4f5364399dc90b
-
SHA256
5b806c56f7be07342e041d3b333ff66e8b0d947643c2976b23e0afe371367f57
-
SHA512
f1cec753bb47501343f1b1df70c54f08aa00e6df941b8119ca4786e5a5f8a55e759e1965667daa825eea10a223b3c9cd43b7ead2b4cd4beef1c61c9c9c7752aa
-
SSDEEP
384:3lgn1I4uPAr6KBWAJYAYvzMhsv+/kioq//p:1gni4SyJVYvysm/vd/B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8588a94d2f93d0833da49676fcce001_JaffaCakes118
Files
-
b8588a94d2f93d0833da49676fcce001_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 9KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE