Static task
static1
Behavioral task
behavioral1
Sample
002a5c80af11202e4d37fe978930b42e_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
002a5c80af11202e4d37fe978930b42e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
002a5c80af11202e4d37fe978930b42e_JaffaCakes118
-
Size
164KB
-
MD5
002a5c80af11202e4d37fe978930b42e
-
SHA1
b6b4bca813e646279b412c9161efd879e59ff842
-
SHA256
d8bdc2f82334aa7da879cd79c0b4c60b078e45003d2039040019fd03532cc998
-
SHA512
3e19b2ea63e13bc41918de3e58dbe6d1f27b6a4fa7cac0b7c79d7a50ddd322b101464629dc62e182c22e0fe5fd50d57364b9b71e8d0fa26b7dad13b33f00a7d6
-
SSDEEP
3072:Mr8oicqf8D9wpKATcri9J5APf1DgWWw5RAz+ia385HiBpySbgarhE06VI3kHaPRz:WzHQuwpnTcrp31TZCzlz5Hi/yma06Vw5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 002a5c80af11202e4d37fe978930b42e_JaffaCakes118
Files
-
002a5c80af11202e4d37fe978930b42e_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 44KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE