Static task
static1
Behavioral task
behavioral1
Sample
c82971934c10deb9811dcb6d77c39968_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c82971934c10deb9811dcb6d77c39968_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c82971934c10deb9811dcb6d77c39968_JaffaCakes118
-
Size
18KB
-
MD5
c82971934c10deb9811dcb6d77c39968
-
SHA1
888265897d59cec352153b33f97f157ae4e4df9c
-
SHA256
e3ff8d7d3872452545c6e842abdcb3f7a0d3cf099aafe4b4cf099c95d1bd28ee
-
SHA512
4fb64718f47c0243f9a1b840497cc627d0cad61c915e6b252eb9fadd043c33927e9679115e81579cc184246be7ac2f3be0846c88df67e81fd640b083df70831c
-
SSDEEP
384:FZJ3BP1V9wa+MxEPe0BFyVzWxRdsUKUnnXLsqZgSYqayhXO+g:F/RP14dMZWxR6BM7sqZgq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c82971934c10deb9811dcb6d77c39968_JaffaCakes118
Files
-
c82971934c10deb9811dcb6d77c39968_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 13KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE