Static task
static1
Behavioral task
behavioral1
Sample
b9a6864fa5914ff5d415b6b2fa8d22ef_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b9a6864fa5914ff5d415b6b2fa8d22ef_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b9a6864fa5914ff5d415b6b2fa8d22ef_JaffaCakes118
-
Size
337KB
-
MD5
b9a6864fa5914ff5d415b6b2fa8d22ef
-
SHA1
ba13bb16a5a5e346c0a94e177c773153b7822c94
-
SHA256
96d5ac3921b5a420492800610f95278627a9785f5a1083bfb5b5d1e637f398c5
-
SHA512
1fbb9dfc1ef61fd27ef659fa1e1e4157c63db50af287616a3adfa650b1200c61a7ccf1b6ac0f17afda194c441620ae9f70afa4e9c6b00d0f1d103c33c85f0392
-
SSDEEP
6144:0/FVIAZ7HG9Q0+ud55vjUuGQh922WSm9Aas8RKXe//X4jOdB1mc7CLMujclj:avIAZ7HG3+udjz92xbU8RKa/1B1mOCwP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9a6864fa5914ff5d415b6b2fa8d22ef_JaffaCakes118
Files
-
b9a6864fa5914ff5d415b6b2fa8d22ef_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 8KB - Virtual size: 404KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE