Static task
static1
Behavioral task
behavioral1
Sample
fec94116ec979656289c7f6dbac7d110_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fec94116ec979656289c7f6dbac7d110_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fec94116ec979656289c7f6dbac7d110_JaffaCakes118
-
Size
7.3MB
-
MD5
fec94116ec979656289c7f6dbac7d110
-
SHA1
c8f237aa8d88744b38b91b73b2e45079cc6137c1
-
SHA256
b2d022b53c4217b6a69d459cfe7abee3e2ecd9a677ae79b85b08c4b1ae1466a8
-
SHA512
41d79ee510336427ae515f146ed04fb67bdc93f3794716040d2167fb548f2d7e90ebcebe201fd115c74aa8e3e8a451f317256bbe05b59c10739e3a58c85a4d0f
-
SSDEEP
768:LyNovA586VA/H/pAcbVugAFBbadjHO+yav9Hps61JqL0L0LVLj:L7t5ZbVug2Fada+y0BpbDqL0L0LVLj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fec94116ec979656289c7f6dbac7d110_JaffaCakes118
Files
-
fec94116ec979656289c7f6dbac7d110_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.data Size: 12KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE