Static task
static1
Behavioral task
behavioral1
Sample
bef30b4bc18e96d18ee4c08967311f0f_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bef30b4bc18e96d18ee4c08967311f0f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bef30b4bc18e96d18ee4c08967311f0f_JaffaCakes118
-
Size
24KB
-
MD5
bef30b4bc18e96d18ee4c08967311f0f
-
SHA1
1d9670fe0a706396dc5ae13e192fbd9ba046122b
-
SHA256
8a234fce401fe26102b797ee0bd4cde7e90d95f9ff1391ce7e514cab6c84aaf4
-
SHA512
8d33f5bd93e41acc6c0c8762057a654964e80fc4182a49b90d4a439f2a1b7b93ca7b6b9864f90a22f84d8e9cbe6d5d0a91ffe2ec49104b019a870e4a3d17dabc
-
SSDEEP
768:E1zKLt/UBi71QO8ux9GHZjxZ2hThcl10a5:E1uLt//71QO8xxZ2Bql10S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bef30b4bc18e96d18ee4c08967311f0f_JaffaCakes118
Files
-
bef30b4bc18e96d18ee4c08967311f0f_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 20KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE