Static task
static1
Behavioral task
behavioral1
Sample
c94cfa3e7d71e589e0623db5cf2782b5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c94cfa3e7d71e589e0623db5cf2782b5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c94cfa3e7d71e589e0623db5cf2782b5_JaffaCakes118
-
Size
1.2MB
-
MD5
c94cfa3e7d71e589e0623db5cf2782b5
-
SHA1
339f88fb5ca9ac8dd9ce1b2dfa8bbafad165fda3
-
SHA256
1dbdb3bdc208cd06f42aca2bed7c983487af51c739b7386c7d9019e07def5566
-
SHA512
f9ea5859b7575dc3a31b2ffe3c5dea10dfbd5f8b5f17122214c174ecb84a15d14b7b286c5564d61041a15da772b67a8c6d156c3ab40580cf3e285236e1708251
-
SSDEEP
24576:Adby7p3VnJBD8wpsaH37tphFJPFyy1xpw/fkeURXzO5sWuZRZ5QrVm8WRPf:0y7p3VnzTX7RrJ1Cf5CCs/Z5QrVm3RPf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c94cfa3e7d71e589e0623db5cf2782b5_JaffaCakes118
Files
-
c94cfa3e7d71e589e0623db5cf2782b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
f0aed4f566840a701ae1beb9657c41d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
DefWindowProcA
Sections
heat.ray Size: - Virtual size: 2.9MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
heat.ray Size: 871KB - Virtual size: 872KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE