Static task
static1
Behavioral task
behavioral1
Sample
cfce62c2d1c8af77de1535237fa5b1eb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cfce62c2d1c8af77de1535237fa5b1eb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cfce62c2d1c8af77de1535237fa5b1eb_JaffaCakes118
-
Size
69KB
-
MD5
cfce62c2d1c8af77de1535237fa5b1eb
-
SHA1
1f03df6947a43fc3f894ca2aa5640c90ee54b0c0
-
SHA256
a217ae827db13a5def8460d4ffab5568df2ef709174b9d4c7b233cbdb1b14dfe
-
SHA512
3bade8fc773f133973a6e36649c913fce45b87c61356d7dbfa2cf44dbc1277f58c90c5d2db1fb73a300e13a751b60eb55ad02f6fc1ac93759ccebe4eabfd8d23
-
SSDEEP
1536:C+WvoFV4+kZBqMWvoFV/awTtlwhEb/7T4W/b+Mtjni16zEszxlM:wvoFm+OYzvoFEU+EbX4WqMtS+zxW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfce62c2d1c8af77de1535237fa5b1eb_JaffaCakes118
Files
-
cfce62c2d1c8af77de1535237fa5b1eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
827ae9e92f0226e668e5b65613328163
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
ws2_32
inet_addr
Sections
.pado Size: - Virtual size: 428KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pado Size: 81KB - Virtual size: 84KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE