Static task
static1
Behavioral task
behavioral1
Sample
d1ff901b095a9295e16c6af6487c83a6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d1ff901b095a9295e16c6af6487c83a6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d1ff901b095a9295e16c6af6487c83a6_JaffaCakes118
-
Size
47KB
-
MD5
d1ff901b095a9295e16c6af6487c83a6
-
SHA1
3cf130cd40e9718a2caf73d13af84f39055e22ce
-
SHA256
14abddc77421b4155d0425b08f52ca6a89adbda9592869a1071cab76ad460980
-
SHA512
8934624447519eca47f6ec3dc9db38547e93f1d817984355e448598ca1c39efe4167bff1c74b9fdf0e87c8c31f3356bdda446017f0fbe7f4b30e7bb22c0cf677
-
SSDEEP
768:vd6fGT5uK1COK8CU1ppZHzuusQVT8SSpqoszZ4wnHySSHOFr/bcgmfEEW4:vd6+F71TKyppousKASkq70HAEaEW4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1ff901b095a9295e16c6af6487c83a6_JaffaCakes118
Files
-
d1ff901b095a9295e16c6af6487c83a6_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 38KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE