Static task
static1
Behavioral task
behavioral1
Sample
c02d8dbd545695e004ba9eb2bb7d0480_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c02d8dbd545695e004ba9eb2bb7d0480_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c02d8dbd545695e004ba9eb2bb7d0480_JaffaCakes118
-
Size
201KB
-
MD5
c02d8dbd545695e004ba9eb2bb7d0480
-
SHA1
5794cfde441e5d759b01377639ac75f640e39a03
-
SHA256
f4ef4047c66b166e73130c1117d01e74f01a514dd3b8544398c10cb2cf701258
-
SHA512
33335468d4883c255b8787e9131341207da6e119d46665bdae4dffd5b9a9901a3f8389655dbcf830ee62d76d1fa9c4972ba32e37d99fd8a5e4d9bf664d386f90
-
SSDEEP
6144:KA2FV3wfPuhSQr2pS+XRRl+Ta5zrbxEK:KAKMuhqpS+XRnFzJEK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c02d8dbd545695e004ba9eb2bb7d0480_JaffaCakes118
Files
-
c02d8dbd545695e004ba9eb2bb7d0480_JaffaCakes118.exe windows:4 windows x86 arch:x86
24734dd2e70099b3dbbd6bd67280238f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
wsprintfA
ole32
OleInitialize
oleaut32
LoadTypeLi
Sections
.POGO Size: - Virtual size: 192KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.POGO Size: 80KB - Virtual size: 84KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE