Static task
static1
Behavioral task
behavioral1
Sample
cf84c8aede92faa9b7134ae63ac03a2a_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
cf84c8aede92faa9b7134ae63ac03a2a_JaffaCakes118
-
Size
789KB
-
MD5
cf84c8aede92faa9b7134ae63ac03a2a
-
SHA1
61f0b9f975063528a6621409584c5a05856914e0
-
SHA256
fe8e0b671b60b6f26685fea0c7a0d54470b216abe2a5d3e107b2911bb94070ba
-
SHA512
3a5f15fc422846f0e4dc48e68351c2aecb12507e250c0c8ac7c2baa79e2cc5d925b91a18d5a38e202a37acfed0e81d141cc7d7f91dc7924c5e5a8b75266c3abc
-
SSDEEP
24576:yL32XfDqmqkKS6cfNfNIN4jp3DZPtq/h:yL32vDqgKrujpzZ1q/h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf84c8aede92faa9b7134ae63ac03a2a_JaffaCakes118
Files
-
cf84c8aede92faa9b7134ae63ac03a2a_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 769KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE