Static task
static1
Behavioral task
behavioral1
Sample
d513afff0a97da3504412b98be9df2d9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d513afff0a97da3504412b98be9df2d9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d513afff0a97da3504412b98be9df2d9_JaffaCakes118
-
Size
622KB
-
MD5
d513afff0a97da3504412b98be9df2d9
-
SHA1
03257c819e4ada631031fd3ec8674db9431465db
-
SHA256
b4a380a4bb03cf7920d7ed30fbfd7a626091a4bd9b34c3d6f82fe50b46d8043c
-
SHA512
5f9883fc6b05d0372fb3e138963e4146678e0ea698448ed8c7808c12813f199476a01308c07b1efc5d33b7ccefe7c77302dfd53e9fdb5f9074b66c5a5da36d15
-
SSDEEP
6144:YputRkQsfiV1EBv/VVNa1msyuP06HK74o1e9UjjEW5ls6UFC3Ig/sqvGfqX+wYK2:Pt+fi4vNVAEuhHy4ocnOscYpeFenC3Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d513afff0a97da3504412b98be9df2d9_JaffaCakes118
Files
-
d513afff0a97da3504412b98be9df2d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 250KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 371KB - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE