Static task
static1
Behavioral task
behavioral1
Sample
fffbb0ed41d36060b93d224b5d5a7837_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fffbb0ed41d36060b93d224b5d5a7837_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fffbb0ed41d36060b93d224b5d5a7837_JaffaCakes118
-
Size
166KB
-
MD5
fffbb0ed41d36060b93d224b5d5a7837
-
SHA1
f3f6f68935a34a381052c17b9b235fcb8b2c43b6
-
SHA256
616fe819edac407ee11fd07559e472bcf3327bddcb5bc8b87fdd25597e6c9044
-
SHA512
9885a78d63900c30705d8643c4391aacf5680e49e37427c37c66d7163bc2c72865b039e8dbd91a9b48c49f830903fc2529f6aa1399a45585ef0768241505a9fb
-
SSDEEP
3072:Al6XyGs2Xuw7n/dYjMQkGXU6f0mnr7iGPyx6k4GxzPrgd3BS9AgNHYRLXHT60UH6:Al6XyGs2+w7/4fkGXmgr7iGPEn11DgdX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fffbb0ed41d36060b93d224b5d5a7837_JaffaCakes118
Files
-
fffbb0ed41d36060b93d224b5d5a7837_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 90KB - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE