Static task
static1
Behavioral task
behavioral1
Sample
ff905bc2468995447f8b8dcad67c3627_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff905bc2468995447f8b8dcad67c3627_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ff905bc2468995447f8b8dcad67c3627_JaffaCakes118
-
Size
61KB
-
MD5
ff905bc2468995447f8b8dcad67c3627
-
SHA1
10ac1d8d5877d5eda65bac2dd2027daaccdfed7d
-
SHA256
65bed704606047a67465dde251f0aa52794bb12ee92ebae7c0d11c9d49133b54
-
SHA512
cdbac802aa82ec2ca6d5b3363d1bed2587fbbb0b1489da0440b16def8178664d30402414e6ab13c9eb76c57409046d5a115b41e90870426fdacb02068616b791
-
SSDEEP
1536:QnRQQrDzm6FjB2b72kcJnbCc9McZuhV3HgI5:QndhFjM7fcNp9MouhRHgA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff905bc2468995447f8b8dcad67c3627_JaffaCakes118
Files
-
ff905bc2468995447f8b8dcad67c3627_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 53KB - Virtual size: 376KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE