Static task
static1
Behavioral task
behavioral1
Sample
de8d119d00d52c519646a13d57f2f37f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de8d119d00d52c519646a13d57f2f37f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de8d119d00d52c519646a13d57f2f37f_JaffaCakes118
-
Size
379KB
-
MD5
de8d119d00d52c519646a13d57f2f37f
-
SHA1
290bd04030111d5224d3f80d56b67345c9851487
-
SHA256
129fc03ea2dece65387edfbd9f8d938bff3a607fa1287100e668ae20ed607c18
-
SHA512
ed00dad85776b9818d05dc214cb103cc89829d5f6c511c09c7ffe65df516e4d72e4ea4e6604a2edd9652db5a7f5db2063b8653df75e6dced72b3311f5ef5f7b8
-
SSDEEP
6144:d+dOTfFDbRnOTrt5JXd2RrIH4ZWpGeEAMQaEABWfeqhI7/NeOvHDqi4uyaXt6kAY:d+ds5O345o6nQVMWfze71H7p4u/XZAw/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de8d119d00d52c519646a13d57f2f37f_JaffaCakes118
Files
-
de8d119d00d52c519646a13d57f2f37f_JaffaCakes118.exe windows:4 windows x86 arch:x86
17e51c176c8bdffe055c11b23a83a88d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
LoadCursorA
ole32
CoMarshalInterThreadInterfaceInStream
oleaut32
VariantInit
Sections
.text Size: 19KB - Virtual size: 512KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE