Static task
static1
Behavioral task
behavioral1
Sample
fbf78e3580db6c19d8989246a5e634c2_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
fbf78e3580db6c19d8989246a5e634c2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fbf78e3580db6c19d8989246a5e634c2_JaffaCakes118
-
Size
34KB
-
MD5
fbf78e3580db6c19d8989246a5e634c2
-
SHA1
bc79b48d2018c041fb35d6abd1725d8c12671b71
-
SHA256
a9bc82a01c7bca68e711a48e7842b8322c9b092f9fb547c97f6fd6b1cd68350f
-
SHA512
0a0478c8f8ffce517ecad7a50b51d883d2357a3f11b9769fc4bdfde895b97d9197b5bb3a007c0bd940691b53fcc03d5d3866c6267b33f6337d3c62dfeae31788
-
SSDEEP
768:kORJer5BxuQqULI7EF3fLPb8vqCBpKfZ7KaXQABQwbULY0XHcgKuoPP:xJ2ID7Ex7LC2K3CPP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbf78e3580db6c19d8989246a5e634c2_JaffaCakes118
Files
-
fbf78e3580db6c19d8989246a5e634c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
acd9fa3a74cc4c1d92998e6ad62eeb8f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
LoadLibraryA
user32
wsprintfA
MessageBoxA
Sections
.data Size: - Virtual size: 732KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE