Static task
static1
Behavioral task
behavioral1
Sample
debe3c68e243711fcfe463e4e10a0a94_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
debe3c68e243711fcfe463e4e10a0a94_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
debe3c68e243711fcfe463e4e10a0a94_JaffaCakes118
-
Size
202KB
-
MD5
debe3c68e243711fcfe463e4e10a0a94
-
SHA1
b7a10d31bdb59e2bb5c5ee4fe53c31b9ba1155fe
-
SHA256
b3b08fd36bc753b9d8afcb968e5e78e63b8e33e5441d8889427b029cd23d9783
-
SHA512
6641a7069a77f58d8ece61b6d4ad414540172750dc5d14560ff3bc290a78c7bf65f078dcaebe35a7ad537f91cd4cd761f3af60627d376e182105f57a3adf3931
-
SSDEEP
3072:BvwZfCyHENIIK7yfhLVII7f7bF/h9g+PlISxl+LeiXt7p7gLiiI93jJr2zs6:BMVHK/jIIzN/3PlISxlLSt9lTN2zr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource debe3c68e243711fcfe463e4e10a0a94_JaffaCakes118
Files
-
debe3c68e243711fcfe463e4e10a0a94_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 192KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE