Static task
static1
Behavioral task
behavioral1
Sample
cf9588c6cf4fd680f708b528a23d2b18_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cf9588c6cf4fd680f708b528a23d2b18_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf9588c6cf4fd680f708b528a23d2b18_JaffaCakes118
-
Size
44KB
-
MD5
cf9588c6cf4fd680f708b528a23d2b18
-
SHA1
50f0c78654076cd1f60b76c3192c87cd0e761275
-
SHA256
d77fa722f091b3b7f82283bf7f3efd77dd79f857c8bea1189afcd73152c8178f
-
SHA512
740579a1acd77ca419ef484c57f9f1336e7d67dbbac064e62e4b1e0c5953e4184c528db2274c25626595b2fcf032edd88f6312dd4ba1caf69c400f71ff88b348
-
SSDEEP
768:D5TBRYoWYexSbfbqC2z5SBZpZmnABdRmUV/ccDUsije8MGh:Dv+vzSjbJ2FU3JBdRzRccHGh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf9588c6cf4fd680f708b528a23d2b18_JaffaCakes118
Files
-
cf9588c6cf4fd680f708b528a23d2b18_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 17KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE