Static task
static1
Behavioral task
behavioral1
Sample
c77d000be17fee914c2c46cfcf3753bd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c77d000be17fee914c2c46cfcf3753bd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c77d000be17fee914c2c46cfcf3753bd_JaffaCakes118
-
Size
354KB
-
MD5
c77d000be17fee914c2c46cfcf3753bd
-
SHA1
bbb71e74223b9b8a46660bed5e85bc4b44224754
-
SHA256
d28388fd2642227ebf527f66c3082804ec6ae9f28b8c23f49d4f3ab5ebb68787
-
SHA512
5e37b82433e2f5f2286eb7c5d7309605562f144fcd346b7d4cdafcbb04e4aa5934932f69a162c0ce277e1b1e8745efceca3585ec2f7b07bdc0dac50ae9563b73
-
SSDEEP
6144:odTUO8iRUXdsL2fltTcGIHfyXWh1pqBSyKaYfshPF0MCk8VtUSxrrL3kTCzMMMR:oSXLX6+ltcj/t1oLHFcZtUSpXdMMMR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c77d000be17fee914c2c46cfcf3753bd_JaffaCakes118
Files
-
c77d000be17fee914c2c46cfcf3753bd_JaffaCakes118.exe windows:4 windows x86 arch:x86
119ba01abad812c4a461368344bcd6cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
RtlZeroMemory
VirtualAlloc
VirtualFree
VirtualProtect
Sections
.pepsi Size: 348KB - Virtual size: 448KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE