Static task
static1
Behavioral task
behavioral1
Sample
c1fa2f50b7a4931ad389001924a54c6d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c1fa2f50b7a4931ad389001924a54c6d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c1fa2f50b7a4931ad389001924a54c6d_JaffaCakes118
-
Size
25KB
-
MD5
c1fa2f50b7a4931ad389001924a54c6d
-
SHA1
0dfa9f5b6e6f590bb828517e593caa4fef519bd5
-
SHA256
f0944961c4984631ff91605ec786689030e0f26ad8fc98b0d2172e6bf50fb058
-
SHA512
47c3b9aee244119a3b49f245e56be38512673412d5e48262b8a17188fa41a69bd352ee62872b6b78d22d4b3eacaecb7ae7c8bbf51646d568d3e0a1faf524945d
-
SSDEEP
384:EkFigIMiJ0KW1R7EdEJxARYoOlVR4ZsSnM3A+SQ0vjm8BvvcoenpiUnGlsxNfq4d:EkF9y0d1EdEnwghS1jJBvJ/qGOxNjV7P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1fa2f50b7a4931ad389001924a54c6d_JaffaCakes118
Files
-
c1fa2f50b7a4931ad389001924a54c6d_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 21KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE