Static task
static1
Behavioral task
behavioral1
Sample
c1e6aa40f8e4d8a3e8c7296ab35767eb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c1e6aa40f8e4d8a3e8c7296ab35767eb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c1e6aa40f8e4d8a3e8c7296ab35767eb_JaffaCakes118
-
Size
126KB
-
MD5
c1e6aa40f8e4d8a3e8c7296ab35767eb
-
SHA1
097a8e5d1688a6935e77c1fe398e0b1a3ac6917c
-
SHA256
f74438580102abca39ac4dff09c3548ac2ec321adb40e5bc37433bd7d3040c30
-
SHA512
8cf94f9871477c787f52a886c393c552c312a9aabb2ad84db2f39186a4af00d396cccb0bd94a791309ee46506dcab775cbc5ea7ca006e05c308d93171739d5bc
-
SSDEEP
3072:H9EO2NP5pm0/F8lHPxMUaImOpKYg+CY820oTuydWZ:H/2lT/cHPxMUaImSTT820sdWZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1e6aa40f8e4d8a3e8c7296ab35767eb_JaffaCakes118
Files
-
c1e6aa40f8e4d8a3e8c7296ab35767eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 36KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE