Static task
static1
Behavioral task
behavioral1
Sample
f71f48d22e6308c4e0f66906499a70fd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f71f48d22e6308c4e0f66906499a70fd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f71f48d22e6308c4e0f66906499a70fd_JaffaCakes118
-
Size
68KB
-
MD5
f71f48d22e6308c4e0f66906499a70fd
-
SHA1
277844795f311de429e868df60330be0678d18d2
-
SHA256
a8c3d08c92be68fecb7146208dfcd3d5f75ba198f29d3dc710a62fab54ec0554
-
SHA512
c88a6aa9a2e77407e2906e25323c8dc6b9e45289238f2ef8642f9583ae4e232e3ae64dc3cf154069b8be84a054a5086bfdea57c7efa33bbbcc051d118b74165e
-
SSDEEP
1536:8Y15NAqrVOYsQ0wnLJiuGzMzbAr/9TLJrJS:j15NAqrlswsu5XAr/9TLJI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f71f48d22e6308c4e0f66906499a70fd_JaffaCakes118
Files
-
f71f48d22e6308c4e0f66906499a70fd_JaffaCakes118.exe windows:4 windows x86 arch:x86
4c0c4f68eff15cf5001f6952dc85cb0c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
VirtualAlloc
VirtualProtect
VirtualFree
ws2_32
socket
Sections
.cdi7j Size: - Virtual size: 448KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdi7j Size: 67KB - Virtual size: 68KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE