Static task
static1
Behavioral task
behavioral1
Sample
bca3b19f45d1fea8dfabc37a5cd3aaac_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bca3b19f45d1fea8dfabc37a5cd3aaac_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bca3b19f45d1fea8dfabc37a5cd3aaac_JaffaCakes118
-
Size
44KB
-
MD5
bca3b19f45d1fea8dfabc37a5cd3aaac
-
SHA1
afed501167866e2d5f4f0424e40a675544b35e62
-
SHA256
81336721ecc05bb6775871272a0628053928a4c3fae10c6c7773c93943133c62
-
SHA512
8e771aa10e485dde8aece361947ca7063258e707b5bd45026375255da0fbbc3f49106824abf7f19168508a02963279ca393ab14dcd6eb60b8d8ebafa8c8cce65
-
SSDEEP
768:9N1ymxl6v63DpXDXF5Z50/Fyl1BShd8S4QQQuCnS6FJy34Rj:8mxlY6tTPZ5bBShd8SeCnta34R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bca3b19f45d1fea8dfabc37a5cd3aaac_JaffaCakes118
Files
-
bca3b19f45d1fea8dfabc37a5cd3aaac_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 25KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE