Static task
static1
Behavioral task
behavioral1
Sample
da96a42666e554f4d20b52253cf48244_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
da96a42666e554f4d20b52253cf48244_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
da96a42666e554f4d20b52253cf48244_JaffaCakes118
-
Size
79KB
-
MD5
da96a42666e554f4d20b52253cf48244
-
SHA1
15cd7c9815b4122a82f9d42efdd85c4f4ea3449b
-
SHA256
311ca638d6338ec48f358d2b8818f8c97aef01aa7a2d87fd3a10d59c347aadfa
-
SHA512
861e4ca96a86c5ecc65c3b1b9f583a12b1b7f832d9ce8f71a0724206a6a642e3f23a2fa84a8bbb372fb23edfb29c17d2e99c3b9777c150da3fa3d47929f34208
-
SSDEEP
1536:0KwPA2WYZEqHwwehZBqH05c0q6hSesQykwTJb5G4xtViGGG30k1r0S:tf2IOoeH05y6hSZkwN5G4rV+6F1L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da96a42666e554f4d20b52253cf48244_JaffaCakes118
Files
-
da96a42666e554f4d20b52253cf48244_JaffaCakes118.exe windows:4 windows x86 arch:x86
9186caf394e2b06dfe3d33c23aac81c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
VirtualAlloc
VirtualProtect
VirtualFree
ws2_32
inet_addr
Sections
.dvt Size: - Virtual size: 500KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dvt Size: 78KB - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE