Static task
static1
Behavioral task
behavioral1
Sample
d32319b651e2985d3c9b5c5d47d0331f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d32319b651e2985d3c9b5c5d47d0331f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d32319b651e2985d3c9b5c5d47d0331f_JaffaCakes118
-
Size
21KB
-
MD5
d32319b651e2985d3c9b5c5d47d0331f
-
SHA1
eb21f1123e2b6e737bfab01f88db5b27f41e35b8
-
SHA256
2985d2f8c3cb359933e2f0c27f520a832f30f6cc9f98ba0afe9cde298f88d027
-
SHA512
f85239db2ac10e7f1b25cf4e555ec3dbb83daaeb500c5c21f8c6cf114a49bd6f41963122d34765dc5852fc72a76c9fbf61daca49e3d7d993d70b943a27406b39
-
SSDEEP
384:OQeC1XxcmEPX2UNUcHHynyrS7drJaKiw80sOrMgW5KNB/rl:lNhcmK28SnyGXaKtXea
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d32319b651e2985d3c9b5c5d47d0331f_JaffaCakes118
Files
-
d32319b651e2985d3c9b5c5d47d0331f_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 17KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE