Static task
static1
Behavioral task
behavioral1
Sample
fde53a5f54d769a2deba172121ac1028_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fde53a5f54d769a2deba172121ac1028_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fde53a5f54d769a2deba172121ac1028_JaffaCakes118
-
Size
47KB
-
MD5
fde53a5f54d769a2deba172121ac1028
-
SHA1
7e683fdc6e98b420535fb4a6bca1ec79321ef2a8
-
SHA256
098a226bab478854094385f0416eb27e20fc54781bd5cfcadfa762af0ce7922d
-
SHA512
a4a894cf40276229b21ea6322aee48bdce4ac9f0c4d5fdc2221f90fb36989106bcdf8ea6bcc5d7ed36d10a44b7b7d79674db668fca9755e91741223bdbfea39a
-
SSDEEP
768:qF5FRkwGw+cUhFY3wF0WooOWBAXIA5IRZs+VQYDSxfnRvukE0FE3iBE6ajGTNkD:qb+JYebpdcd5UNVcFRk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fde53a5f54d769a2deba172121ac1028_JaffaCakes118
Files
-
fde53a5f54d769a2deba172121ac1028_JaffaCakes118.exe windows:4 windows x86 arch:x86
acd9fa3a74cc4c1d92998e6ad62eeb8f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
LoadLibraryA
user32
wsprintfA
MessageBoxA
Sections
.data Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE