Static task
static1
Behavioral task
behavioral1
Sample
f2e1357984739e82ea1a4339e1044689_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f2e1357984739e82ea1a4339e1044689_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f2e1357984739e82ea1a4339e1044689_JaffaCakes118
-
Size
76KB
-
MD5
f2e1357984739e82ea1a4339e1044689
-
SHA1
d0219b00e8895307d938635d8f063b7454c80e7f
-
SHA256
df1fb66e66dfd6a686f918bc6a43eb742190eca975e9993106824140a56577bf
-
SHA512
8c27040de47112f9daaa7d9b564bd7709f6bb98af46dc0db1192163213ea852f077c5b1c995c8d5ce548b5c5244f2dbe42b9cbad392792cbc15945d38e671073
-
SSDEEP
1536:rZ7WKsy/sYvUJsA5ZFQIWqOsUu7HFCXs3Cr621X+m4g:rZ7WKsfD5ZeIWqOs57llCr628m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2e1357984739e82ea1a4339e1044689_JaffaCakes118
Files
-
f2e1357984739e82ea1a4339e1044689_JaffaCakes118.exe windows:4 windows x86 arch:x86
a7333743ef063a68d1d860bbdf1c328e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
VirtualAlloc
Sections
Size: 19KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE