Static task
static1
Behavioral task
behavioral1
Sample
d72638f9ba09e9c163e5f610aee29282_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d72638f9ba09e9c163e5f610aee29282_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d72638f9ba09e9c163e5f610aee29282_JaffaCakes118
-
Size
86KB
-
MD5
d72638f9ba09e9c163e5f610aee29282
-
SHA1
cf970b71ec56fd7cdc0b4433ca842fd3124b2bcb
-
SHA256
8545cd76be267b81b2ad16b4318b4e9bdcf047d4904fd4a1b4f4a8f7eb9864d4
-
SHA512
2c05ff4abbdbd85010b96304c5be2cd768203a6066e36695416aeacfc46511c273f87aaba8b556b510b2e3ec652de1d7c09fc8eef4253a2aa2e256210a445c21
-
SSDEEP
1536:7KWKgq/8EwGpXdyAE+E3Jy24AALy7zMG8WlO+P1XaDE8vydr3kiiYkF543R:78vr48vAAWM9eP1K48IYiig3R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d72638f9ba09e9c163e5f610aee29282_JaffaCakes118
Files
-
d72638f9ba09e9c163e5f610aee29282_JaffaCakes118.exe windows:4 windows x86 arch:x86
78804175a099b65b6b498b5dafc30ced
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
ws2_32
send
Sections
.code Size: - Virtual size: 436KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 85KB - Virtual size: 88KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE