Static task
static1
Behavioral task
behavioral1
Sample
d5d801ea8e89a94ee27b2892a5d9f0ae_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d5d801ea8e89a94ee27b2892a5d9f0ae_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d5d801ea8e89a94ee27b2892a5d9f0ae_JaffaCakes118
-
Size
112KB
-
MD5
d5d801ea8e89a94ee27b2892a5d9f0ae
-
SHA1
cd3e430460c669f6f9c576c2f6a00e228c74eb03
-
SHA256
cd4636f413173778d7c560e38ee89e6b458ce89c0d439cd8f77a607f9c2f862d
-
SHA512
949cf68a334885a5d06be7cf72582174547bd2e0684f2ef83aba402a5d65c60b9d53da895692593930e539dbf4515e0fa6fc4236c0a8c55e1152b477c4217cf8
-
SSDEEP
3072:go+UB2L75b/xMN1ZaihE9SejIU6CAlfROnJ9pDNU:gCwL/OvhE8GGu9pDNU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5d801ea8e89a94ee27b2892a5d9f0ae_JaffaCakes118
Files
-
d5d801ea8e89a94ee27b2892a5d9f0ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
kkrunchy Size: 108KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE