Static task
static1
Behavioral task
behavioral1
Sample
d28f0c98a155228226c611819f81d068_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d28f0c98a155228226c611819f81d068_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d28f0c98a155228226c611819f81d068_JaffaCakes118
-
Size
45KB
-
MD5
d28f0c98a155228226c611819f81d068
-
SHA1
debf8fa8dfcb8a65f819e1e04621b31df2a87b85
-
SHA256
63c75e0dd8f27920861fe891cb66cae01b5d39b8c45490d2ea5ccb531c7ab9cd
-
SHA512
acc8182e0a6ded7e6b55cd3829508090e62755861e11587eae1d1e3de678f4c870f9387a13de63fb28b322b30d449fdf1026fdbad249eae9b100b301399196e1
-
SSDEEP
768:LB+I3Gg3HpLjDuwywaRnJ4oh0iuG4kwL9ClmO/MqQWVLN9A98zHhNKcVRbM:LPJHpCwywm4oSiB89C//6WVLHA98zHhg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d28f0c98a155228226c611819f81d068_JaffaCakes118
Files
-
d28f0c98a155228226c611819f81d068_JaffaCakes118.exe windows:4 windows x86 arch:x86
64ec96504263663d92a6d0c350e7d59b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32.dll.
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 38KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE