Static task
static1
Behavioral task
behavioral1
Sample
ddf10f0f76bc1dad858ee36d642d57d0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddf10f0f76bc1dad858ee36d642d57d0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ddf10f0f76bc1dad858ee36d642d57d0_JaffaCakes118
-
Size
22KB
-
MD5
ddf10f0f76bc1dad858ee36d642d57d0
-
SHA1
b60a8f575edbb9d3cbbde7bfcd43866e8fd5adb8
-
SHA256
39a6d0eb86784f74c79785f5f7260a0770a4c66cd9633692718f64cd71f607dc
-
SHA512
13a7500707c8fe1097c0af72726610b469b4fdcd9123b23f0e7eeb653d27d74848f0ffc8e5f5021b224b1179a090c1bb2495941835719dd6376fbc55908630e8
-
SSDEEP
384:ClsOSbtkt6pIvB272o6kDWFN2eYedeQWWh9hDhJdc6gje3iw41699:ClQY62vs72oBDmFYseyphctKp9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddf10f0f76bc1dad858ee36d642d57d0_JaffaCakes118
Files
-
ddf10f0f76bc1dad858ee36d642d57d0_JaffaCakes118.exe windows:4 windows x86 arch:x86
807d4dbf88522aca43243ab895fbef96
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32.dll.
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
Sections
.text Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE