Static task
static1
Behavioral task
behavioral1
Sample
c853e2e3d3db157e6cbec47d71bbb649_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c853e2e3d3db157e6cbec47d71bbb649_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c853e2e3d3db157e6cbec47d71bbb649_JaffaCakes118
-
Size
39KB
-
MD5
c853e2e3d3db157e6cbec47d71bbb649
-
SHA1
f1160e911d8c933fd349850692aebd7f7daf73cd
-
SHA256
43674c53f4bfccb14b8696230cc15d759f48bc68ab183b593126573ff5ef9b1e
-
SHA512
1ae6c4ecc5e5976512285dcfb29bef5eb6d748cb25e2cd4b04bd6a034d56a0bc3a06724588d1fe4221de0a281c331b260e6b051e6b27aa28eb072eadb48650ce
-
SSDEEP
768:plTzmsUAzo5bG5FlvsyUXQ4vJ4ZVKliT9ULgDcv3t3jqKJL:HhZzo5qbl/UAeJsp9cg63t3jqm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c853e2e3d3db157e6cbec47d71bbb649_JaffaCakes118
Files
-
c853e2e3d3db157e6cbec47d71bbb649_JaffaCakes118.exe windows:4 windows x86 arch:x86
4aa294204df55e6591d76db9aeecaccb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
GetTickCount
Sections
.text Size: 26KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rpbn Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 110B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE