Static task
static1
Behavioral task
behavioral1
Sample
fee69d9f48e422f75601f273425a0a4e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fee69d9f48e422f75601f273425a0a4e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fee69d9f48e422f75601f273425a0a4e_JaffaCakes118
-
Size
352KB
-
MD5
fee69d9f48e422f75601f273425a0a4e
-
SHA1
9bc0222e244b901862c3085ad71e7d4c406d8f0b
-
SHA256
4b3e9c6fc448c14c5e61d7e4743765626b9252d8f100cc4b55514ac4bb29e404
-
SHA512
a214cc283698bc32b2ec4fe1c08f23d228957e56ad31e0fab6eb26527e3690cdfc5ac2f662736cee572d636236103dbf92ed8d2f5277c480dea3e9dba4f84d37
-
SSDEEP
6144:MHBIPQfgPcAVqyIpwPyyblgUkXAIuPv7b8+MGRJJOWde9coRHZ+WfGsblF3oAdRs:ywQfgPcAMyIpwqyIQIuPv7b8+3LJ6OtX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fee69d9f48e422f75601f273425a0a4e_JaffaCakes118
Files
-
fee69d9f48e422f75601f273425a0a4e_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 8KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE