Static task
static1
Behavioral task
behavioral1
Sample
faac85feeea49234352afdc8a4dae731_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
faac85feeea49234352afdc8a4dae731_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
faac85feeea49234352afdc8a4dae731_JaffaCakes118
-
Size
13KB
-
MD5
faac85feeea49234352afdc8a4dae731
-
SHA1
ecdd9dd5b76277dd89395937b9f0b339368d33bf
-
SHA256
e3aa99f4ae99c88870301eaac61ea2afc18c89d23e3e66d158ae74f00082f161
-
SHA512
8993d942b3d4b53d8da6832e949e66659aff634798701f6813d98d01ebb104b606a2070a82267dedf9536afc03ebad31e08b36bbd3dc718d336c6b09a8e8ae9e
-
SSDEEP
384:S1uAxUTe1Ejeq/gYy4GmO0ZFzvDypXCnHH:e3jEjeq/gYySO0ZVrypXCn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource faac85feeea49234352afdc8a4dae731_JaffaCakes118
Files
-
faac85feeea49234352afdc8a4dae731_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 10KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE