Static task
static1
Behavioral task
behavioral1
Sample
b877a3141b3c1ecc530b6e3f977d562b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b877a3141b3c1ecc530b6e3f977d562b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b877a3141b3c1ecc530b6e3f977d562b_JaffaCakes118
-
Size
30KB
-
MD5
b877a3141b3c1ecc530b6e3f977d562b
-
SHA1
1fe645ec86a97c2687d53197312158171ef12255
-
SHA256
3d05806911ca18ba8978f7fa4d336a14ea68cd078ccecc9daddb821282a53408
-
SHA512
7d442186441196b1b7334a73516cb2f2409dfc0e1996b298c4701fd089d194825f8e9a158e7ac9a785c691218c69ee81d1e0c034219935853ce50ebdf9c498ea
-
SSDEEP
768:2ZzncVW+LXEtLvnUL4ZELqvV80eR3mEbQZNMMZvhjMlMg2:8zlCXEtLvS4ZEN3YZNMMZNCO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b877a3141b3c1ecc530b6e3f977d562b_JaffaCakes118
Files
-
b877a3141b3c1ecc530b6e3f977d562b_JaffaCakes118.exe windows:4 windows x86 arch:x86
8db636bfa9298583c117fa3382cc1f92
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GlobalAlloc
ExitProcess
GlobalFree
Sections
pec1 Size: 26KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pec2 Size: 2KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE