Static task
static1
Behavioral task
behavioral1
Sample
dfbf4a11c2d27ead68a027b502d9d853_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dfbf4a11c2d27ead68a027b502d9d853_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dfbf4a11c2d27ead68a027b502d9d853_JaffaCakes118
-
Size
269KB
-
MD5
dfbf4a11c2d27ead68a027b502d9d853
-
SHA1
de4efaf42c31301127ee2950113d8af203bf1bba
-
SHA256
346937ebc1e009541e004581c9be77fdb5bcbd21671a57a6430e731f33cd102f
-
SHA512
5605f995e8b91f065e32d65063a448b8e97292f3fc97a7e66e8a390eb4f8f02e79ccb4ee77eac13f30320f567765ab8952f9abe12148288582fb710f72aa92a1
-
SSDEEP
6144:3Nta59Azv0yFHaN/+c1QD6t9JXp7X80eQ88pfe8+PZSu9dq5a3crBEB8:Da5GrVEc6XR88buZSg+BEB8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfbf4a11c2d27ead68a027b502d9d853_JaffaCakes118
Files
-
dfbf4a11c2d27ead68a027b502d9d853_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 243KB - Virtual size: 348KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE