Static task
static1
Behavioral task
behavioral1
Sample
db146f089f0c58747c8ff1e1f41f6ec1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db146f089f0c58747c8ff1e1f41f6ec1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db146f089f0c58747c8ff1e1f41f6ec1_JaffaCakes118
-
Size
455KB
-
MD5
db146f089f0c58747c8ff1e1f41f6ec1
-
SHA1
a0d522ec88831265767e43d0a1bca90e6dd8cc0c
-
SHA256
506d55d0f255683da9a42c5ac6949572213f579740b518b706a8ea688584b6a4
-
SHA512
7fa9bc3ea8180a4183e49770a02e514d19ae8b0261c79dbe9b98da9eff78171e60c021d85ccebe09c66d298fbac84995f4606b5531a66c5984302b197ed861a9
-
SSDEEP
12288:euJzvBVR8MxZu2cYH7UFSGHXPCm3e+hU5myY:fzRBvUFFHXPCmO9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db146f089f0c58747c8ff1e1f41f6ec1_JaffaCakes118
Files
-
db146f089f0c58747c8ff1e1f41f6ec1_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 441KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE