Static task
static1
Behavioral task
behavioral1
Sample
beb0928d3cf26c17922ec0a9d64d4d52_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
beb0928d3cf26c17922ec0a9d64d4d52_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
beb0928d3cf26c17922ec0a9d64d4d52_JaffaCakes118
-
Size
1.1MB
-
MD5
beb0928d3cf26c17922ec0a9d64d4d52
-
SHA1
37e32662c9caa235df1cdb5fcd8a088dbaa98083
-
SHA256
4f5b37fbfc699005c0a0840c81f2743bf09a873257f6f99691dbf98504331d85
-
SHA512
af2fba8f04e2149219428b3ad9a9692648ba337d6a4b29461649d14dab69fea6f41514e7026aa4e92cc156df4ddf715785ad141f6e31bf17eb9e59fda882d8fe
-
SSDEEP
24576:swJ6Y/gt6I+StnHR5CStV0yxenK3PyEtz1d:sfy5+5ZtVlQK/yEtz1d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource beb0928d3cf26c17922ec0a9d64d4d52_JaffaCakes118
Files
-
beb0928d3cf26c17922ec0a9d64d4d52_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
Size: 405KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE