Static task
static1
Behavioral task
behavioral1
Sample
e212d0f6cddfb7d58ebc454d4217d295_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e212d0f6cddfb7d58ebc454d4217d295_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e212d0f6cddfb7d58ebc454d4217d295_JaffaCakes118
-
Size
622KB
-
MD5
e212d0f6cddfb7d58ebc454d4217d295
-
SHA1
b0aac85eb64b6201a65ec2968c8197a55875118e
-
SHA256
dc8704d3a11a336c2157857fc72739a6c30699ec1f933abcdf62dda21605e63c
-
SHA512
efc37078c7d2d0279cd40e05e65a6161b70b3049cf48f22b3355480221b9ac26ef2d33610648edf0d469db1ca7a81fa883d783aac3a5687a7f7e827a12310490
-
SSDEEP
6144:2putRkQsfiV1EBv/VVNa1msyuP06HK74o1e9UjjEW5ls6UFC3Ig/sqvGfqX+wYK2:tt+fi4vNVAEuhHy4ocnOscYpeFenC3Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e212d0f6cddfb7d58ebc454d4217d295_JaffaCakes118
Files
-
e212d0f6cddfb7d58ebc454d4217d295_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 250KB - Virtual size: 1.1MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
>bcbc Size: 371KB - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE