Static task
static1
Behavioral task
behavioral1
Sample
dda55ba1efa354e727b2b0a66d0d374f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dda55ba1efa354e727b2b0a66d0d374f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dda55ba1efa354e727b2b0a66d0d374f_JaffaCakes118
-
Size
897KB
-
MD5
dda55ba1efa354e727b2b0a66d0d374f
-
SHA1
353cf5d9a7f89742dd9270257c70ce0ecabd2a62
-
SHA256
f40ec01ad8029fb89cb3c3b650167187e042fc7ae900749ac42369bb34bcb4f8
-
SHA512
3759c71423ea8029572b7f89c8617c86c946393761c10beba21892f5c58b03c8d44e9615e2d3c661b193951b93d4e946b042f5742d6957162b8134f9639c1366
-
SSDEEP
3072:ln43o6Y0tItIgGegHSAvkKY8CzX0vmc7AC2dzo2I:ln433Y0t+IgbN7Xhc7ACy82I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dda55ba1efa354e727b2b0a66d0d374f_JaffaCakes118
Files
-
dda55ba1efa354e727b2b0a66d0d374f_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.naked1 Size: 784KB - Virtual size: 784KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.naked2 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE