Static task
static1
Behavioral task
behavioral1
Sample
f56addb3f96cf8d966bd9df3a553cbf7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f56addb3f96cf8d966bd9df3a553cbf7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f56addb3f96cf8d966bd9df3a553cbf7_JaffaCakes118
-
Size
23KB
-
MD5
f56addb3f96cf8d966bd9df3a553cbf7
-
SHA1
4c553fdba3f13ef712f1d35ec78cf12997f2a868
-
SHA256
74745dcaced07eb9d8392276be57e419a8d4d0056f536d26190ee699b614a818
-
SHA512
1dd39e3d391b4912e1f910697b7ee326fefa93cf752a3efdb05ef1e3d55b0b45aef5c87516a958a7c21972e071d808f8d0060ca7c22a74b97468f1a84bcd4cb2
-
SSDEEP
384:97ZKgrqx00tO5Ckp+xNTOdNh3VxpPcjT5C9Pb8xJTLZVKxzV8kvQeC:HFA00z/xANPxpPcj1APb8xRLZVCzuSQL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f56addb3f96cf8d966bd9df3a553cbf7_JaffaCakes118
Files
-
f56addb3f96cf8d966bd9df3a553cbf7_JaffaCakes118.exe windows:4 windows x86 arch:x86
dae2264e721d7c66f7fa35e864d11aba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA
Sections
.naked1 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.naked2 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pseudo Size: 38B - Virtual size: 38B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE