Static task
static1
Behavioral task
behavioral1
Sample
ea272c435934661ecbd017e4d5928de8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea272c435934661ecbd017e4d5928de8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea272c435934661ecbd017e4d5928de8_JaffaCakes118
-
Size
81KB
-
MD5
ea272c435934661ecbd017e4d5928de8
-
SHA1
6941aa03b7648a3f3e91e89f0e80f73c6debae5c
-
SHA256
b9371429c4736860091abb9a30a73d0b60f52f4a6f47c9de249a0effe7b34657
-
SHA512
71a15e9b685e41191c59ad3a401bddf21078ae162314d696019c17d906b642ee98b62839a9fdfcc9ffaf63e363660e796862bec7bffd44164ea63192c2cafa82
-
SSDEEP
1536:HpfaetO2YVXDl/uqXr6UMr/QopzHSd49OBGxpu1kXWSDWSq:JfBHkXD/rrMlk8QGxpu1kjHq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea272c435934661ecbd017e4d5928de8_JaffaCakes118
Files
-
ea272c435934661ecbd017e4d5928de8_JaffaCakes118.exe windows:4 windows x86 arch:x86
2c35ed123bf7fb5532653325910c7a41
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualAlloc
VirtualFree
Sections
.text Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.llydd Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE