Static task
static1
Behavioral task
behavioral1
Sample
b8db874ac98c71dd0bf5156d6b075ffb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b8db874ac98c71dd0bf5156d6b075ffb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b8db874ac98c71dd0bf5156d6b075ffb_JaffaCakes118
-
Size
42KB
-
MD5
b8db874ac98c71dd0bf5156d6b075ffb
-
SHA1
78affafb141db73a2dc771023033023aba3be875
-
SHA256
59d02f006dd73663cb4458b0045830524ccd26d2290a8a108e5d0799c5bf4eb4
-
SHA512
82bb1f4a77ca227ba5718a13576b542746a806184dbf0fa44d6d37af7cd088014fb050b73a0e1c2abb28f10b1448638ea0c72415368ead6c8f722d2aa7615e8e
-
SSDEEP
768:ST6LNfyjDSVmKDsLMfMuJtzrfQ6D8TWsAENJ90KkT6vgQLED5ABdtY7qQkRQWtpH:66LNfcuJgI0uJtzrYQ8qvUGTlD5mGXkZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8db874ac98c71dd0bf5156d6b075ffb_JaffaCakes118
Files
-
b8db874ac98c71dd0bf5156d6b075ffb_JaffaCakes118.exe windows:4 windows x86 arch:x86
119ba01abad812c4a461368344bcd6cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
RtlZeroMemory
VirtualAlloc
VirtualFree
VirtualProtect
Sections
.pepsi Size: 40KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE