Static task
static1
Behavioral task
behavioral1
Sample
cf5175544ea7d7f085e169f81de7583c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf5175544ea7d7f085e169f81de7583c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf5175544ea7d7f085e169f81de7583c_JaffaCakes118
-
Size
455KB
-
MD5
cf5175544ea7d7f085e169f81de7583c
-
SHA1
fa3328352b676dffa114f5a1d9f836d34ae72acd
-
SHA256
4c1a6b9bf31badbc9257b34ddff5e4bc1194a5c40d218a9d1563e8a542009c2d
-
SHA512
cf6d193127d7f0e6daadaf6fca7f96caacd44bbc0fc84007333d50ae9af9f845715806aa407f1f2d1b2f73db80e6330b8a8708d9f9b573dbcf1c04ee62ad2c1d
-
SSDEEP
12288:ULXWRiawVhjBjPtBEIDwbT64wluuiV8bzfHB9uyfLF:2XWk5PBj4T6vlut+zfh9ua
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf5175544ea7d7f085e169f81de7583c_JaffaCakes118
Files
-
cf5175544ea7d7f085e169f81de7583c_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 440KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE