Static task
static1
Behavioral task
behavioral1
Sample
b9f73cd1ea5fd1d485c7e3a3d0873c08_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b9f73cd1ea5fd1d485c7e3a3d0873c08_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b9f73cd1ea5fd1d485c7e3a3d0873c08_JaffaCakes118
-
Size
64KB
-
MD5
b9f73cd1ea5fd1d485c7e3a3d0873c08
-
SHA1
83f67cd5bd33dadf12bb4dfc3c9afc21d925cc9a
-
SHA256
c7c077976ad3339b98e9346c33232e64135b9a6a36c7f084c781977b8569bf49
-
SHA512
bec6ed0b82b403148c8b11da476ea44a7594c8c31ea35a91e75b8d31f5333a49a60ccb4526d26fe3cadc85ec89e55e150ee92953a8f6da5f764f695b1ec5c1de
-
SSDEEP
1536:uzoTLHgIIvy4pXBCwl6K1YiC0OfBPy4BFNV4LM:XTLHVlQXBxhWly0F0LM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9f73cd1ea5fd1d485c7e3a3d0873c08_JaffaCakes118
Files
-
b9f73cd1ea5fd1d485c7e3a3d0873c08_JaffaCakes118.exe windows:4 windows x86 arch:x86
4c0c4f68eff15cf5001f6952dc85cb0c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
VirtualAlloc
VirtualProtect
VirtualFree
ws2_32
socket
Sections
.sm7 Size: - Virtual size: 380KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sm7 Size: 63KB - Virtual size: 64KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE