Static task
static1
Behavioral task
behavioral1
Sample
bdf40b4e36daab2e00e976f00d2d7f7d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bdf40b4e36daab2e00e976f00d2d7f7d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bdf40b4e36daab2e00e976f00d2d7f7d_JaffaCakes118
-
Size
12KB
-
MD5
bdf40b4e36daab2e00e976f00d2d7f7d
-
SHA1
639f92a2d8df5f8a692b62b908b4ec53e0c67e48
-
SHA256
87e2ca80938b2981608c1f39ca0e62e5fac7e0e96dbc2e31e9f9d597b31fb266
-
SHA512
4e5758e0880b475363bd52427e79c220e36883c630b6ad88927ecf2d9ee66e2d081fac046c022b617a8bb3a2cc57122ad22e928232a73802cad111ef723ecfad
-
SSDEEP
384:tVfago0VIUjZTVVYaiOSeK/A5VrginNPM3M:3bGIV5iO+Crg6PMc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdf40b4e36daab2e00e976f00d2d7f7d_JaffaCakes118
Files
-
bdf40b4e36daab2e00e976f00d2d7f7d_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE