Static task
static1
Behavioral task
behavioral1
Sample
d4308106b9a2218dba560f99ed335cde_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d4308106b9a2218dba560f99ed335cde_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d4308106b9a2218dba560f99ed335cde_JaffaCakes118
-
Size
50KB
-
MD5
d4308106b9a2218dba560f99ed335cde
-
SHA1
c5bb2cf07793043dcd81c84dd9b197090b0f96bc
-
SHA256
ae7f5503c60a7f2bfdd75b5cb97828a9911b6b8673c2ebe5fb129861dd703715
-
SHA512
8a19bdf7f0826aef9d437df74587ecc8f9b7b050d143875447f14d5e249ed55ede1e21e4a2e08defac822e206af8ea10df87114a93f05f3c7011f137a1bc4780
-
SSDEEP
1536:dvHuJB5Uqi+CB2YyORL9ayAHPBjRkt8N:dmJBKHB2YAHPvkt8N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4308106b9a2218dba560f99ed335cde_JaffaCakes118
Files
-
d4308106b9a2218dba560f99ed335cde_JaffaCakes118.exe windows:4 windows x86 arch:x86
ae85942686cc66f6726204e907235fed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
ord593
Sections
.text Size: 43KB - Virtual size: 416KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE