Static task
static1
Behavioral task
behavioral1
Sample
c1610ee77559c26d090308c3f11cd654_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c1610ee77559c26d090308c3f11cd654_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c1610ee77559c26d090308c3f11cd654_JaffaCakes118
-
Size
79KB
-
MD5
c1610ee77559c26d090308c3f11cd654
-
SHA1
e1d3a2094216677a53d275e044cb4e5c28fdc29f
-
SHA256
ad583fffb51baa7e7b269f341dd5aae0fdad5a8b42a9c2a0231e4832063dbcea
-
SHA512
a6093fd62ae942330b8c60dd2dca62467c10a2262e51ce37fc66404ed89c995070be7e2f782589503ac1ee3d7d1f8e26c270e7af236a1b236160364cf4f19602
-
SSDEEP
1536:2DgnXl8yMecG9A/CaUDrb0dp8C6Pucgh6wsb/8H:2s18yMzP/CahB6Put/sbk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1610ee77559c26d090308c3f11cd654_JaffaCakes118
Files
-
c1610ee77559c26d090308c3f11cd654_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 43KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE