Static task
static1
Behavioral task
behavioral1
Sample
c86a9920e880dfa18c078b29a4d12aee_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c86a9920e880dfa18c078b29a4d12aee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c86a9920e880dfa18c078b29a4d12aee_JaffaCakes118
-
Size
33KB
-
MD5
c86a9920e880dfa18c078b29a4d12aee
-
SHA1
616d5b555562a1c1a5d4c2ce4c1b06a18727f51a
-
SHA256
2d22e1d54e7d0b0904a3a9fab25093e553a7a1e9bc74ef54bc77378ed0f8e8b7
-
SHA512
3a1132354ce7ed791e54bc95832245fcc33a05db9171f5ecf79dade2599b0b20dd4e7dcd15c3cdd2435e9c0cc3435a7fdc5376092a924c3165284b6458cbfe14
-
SSDEEP
768:khLsLGGjQQ2EHOriIUz82Xl4KwQN9uVvly5QG1eMSvj68ZamEF3:khLsLpjrIUZl4KwOuBye1vXZd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c86a9920e880dfa18c078b29a4d12aee_JaffaCakes118
Files
-
c86a9920e880dfa18c078b29a4d12aee_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
PESEC0 Size: 15KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PESEC1 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 203B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ