Static task
static1
Behavioral task
behavioral1
Sample
d2d23580f3b51ee3d2fa517ff128d1cc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d2d23580f3b51ee3d2fa517ff128d1cc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2d23580f3b51ee3d2fa517ff128d1cc_JaffaCakes118
-
Size
72KB
-
MD5
d2d23580f3b51ee3d2fa517ff128d1cc
-
SHA1
801f15b7ab12e5760264317724dad7abffa0013d
-
SHA256
d7d3b4a70342603fcb08a89dbf5dfe66b4cdaa612814b77f84607d62c25af85e
-
SHA512
45e127f5c6bef6a8adbd1f401b4461d0791d52b040f8ad114b16c1b1b31673de6fe11de3175f9806f00b522991079d109b2ceca4b139b53eb31bc09339565f9c
-
SSDEEP
1536:26QriE7q2hYciOijW/5iG745tSB9Jsf37okvCKuYL6Ml:26CJThFj/EG745tSHiroVKuy6w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2d23580f3b51ee3d2fa517ff128d1cc_JaffaCakes118
Files
-
d2d23580f3b51ee3d2fa517ff128d1cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
78804175a099b65b6b498b5dafc30ced
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
ws2_32
send
Sections
.code Size: - Virtual size: 440KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 87KB - Virtual size: 88KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE