Static task
static1
Behavioral task
behavioral1
Sample
e110e683a101623593630f918fb873fc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e110e683a101623593630f918fb873fc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e110e683a101623593630f918fb873fc_JaffaCakes118
-
Size
35KB
-
MD5
e110e683a101623593630f918fb873fc
-
SHA1
a347a856d7c5b7a89b72113a85a80ee83418d851
-
SHA256
f7f51dfee174d635cebf1736965407619c25e312cce32460a380ab4de409395a
-
SHA512
b22218d0b22c9276d9d9c8bc5ca6f191cb6fc6e318d5ce7f38732b770add9cec22cfe33e04bbd9ad968e9aa8d26eaaae00c7f6175c4506256b66baf2cc49e82c
-
SSDEEP
768:EmHg2QZytNAgVyWBmx3OaAB0h9Pvk0wnN7yXd2g9atwO7/HLOewDBi:9gZK2WI35P8V7yXd2zp7/HLOU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e110e683a101623593630f918fb873fc_JaffaCakes118
Files
-
e110e683a101623593630f918fb873fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 10KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE