Static task
static1
Behavioral task
behavioral1
Sample
d3f3b4587ac4978ee02cb4a33f253caf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3f3b4587ac4978ee02cb4a33f253caf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3f3b4587ac4978ee02cb4a33f253caf_JaffaCakes118
-
Size
210KB
-
MD5
d3f3b4587ac4978ee02cb4a33f253caf
-
SHA1
09328bbbe487c4b873e6caede45f57faf363487d
-
SHA256
5c53a8aa41ebf5fd5a6f2b9a550a4ebd18b37d1892b339d3ed421f468655cb4c
-
SHA512
63d3f12ce1952687358e7f7c416f0451326b9f90b7a61ca9a9b3f47730de2620871a188dc00b544528f13e4453f84976c653ded8c8c86809a9cab17f9f221add
-
SSDEEP
6144:GkTp7AX+nZFj4LuJcJms+5bZ/XPwT0DEHGzY:dt7g8D4LeKmp5807Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3f3b4587ac4978ee02cb4a33f253caf_JaffaCakes118
Files
-
d3f3b4587ac4978ee02cb4a33f253caf_JaffaCakes118.exe windows:4 windows x86 arch:x86
119ba01abad812c4a461368344bcd6cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
RtlZeroMemory
VirtualAlloc
VirtualFree
VirtualProtect
Sections
.pepsi Size: 203KB - Virtual size: 392KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE