Static task
static1
Behavioral task
behavioral1
Sample
dca17f234b4d8b4c3378bd01b9e9b97b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
dca17f234b4d8b4c3378bd01b9e9b97b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dca17f234b4d8b4c3378bd01b9e9b97b_JaffaCakes118
-
Size
9KB
-
MD5
dca17f234b4d8b4c3378bd01b9e9b97b
-
SHA1
26bd4de4739bbba39265b1b7e21488769dbd6f9b
-
SHA256
780322181cc073158ebdb015adc3003eec15a303fae06d1652520aa092c030be
-
SHA512
c38318ad4ff252099351d5816bf5b937a944945d434f45dcb9a50ec6a0e6fa1e25c3d25a71ba65e5823fdf2a3f781da108b9b14804b2316cee5ecfbf365773c9
-
SSDEEP
192:K/NO9+T2vwUvu9mJT4hlHmJTLDD+I6DKFRJ2t:ssXp29mJaOXDD+rDI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dca17f234b4d8b4c3378bd01b9e9b97b_JaffaCakes118
Files
-
dca17f234b4d8b4c3378bd01b9e9b97b_JaffaCakes118.exe windows:4 windows x86 arch:x86
7589ab5b0cc6e2377adb3740e76f820f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetProcAddress
LoadLibraryA
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ