Static task
static1
Behavioral task
behavioral1
Sample
018f78995501cd8aed92d30dfe09301b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
018f78995501cd8aed92d30dfe09301b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
018f78995501cd8aed92d30dfe09301b_JaffaCakes118
-
Size
79KB
-
MD5
018f78995501cd8aed92d30dfe09301b
-
SHA1
f8c17a319880679edb4d47ae5ca4b46b3cc0f7e2
-
SHA256
09a7e358c98ecbaa103978d5e3efceb2e3eb177a0db2694cf25f12e5413f3db2
-
SHA512
78c634e069d6f4cfed654e662e0b2b92195d59477c838411d56948a07a931938f8ae55cb92eb7690f4531aa91dda1aff715db1ac5b0aeada958883e99c0cb7cb
-
SSDEEP
1536:kuK/2P6uAjJfQsDFUWL/I1Ii6yFuMhEwaJx0hYd/SvEkf+hwmQVyXZwF:kzBuSxQmaWM2zo9M/iE4+IYwF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 018f78995501cd8aed92d30dfe09301b_JaffaCakes118
Files
-
018f78995501cd8aed92d30dfe09301b_JaffaCakes118.exe windows:4 windows x86 arch:x86
827ae9e92f0226e668e5b65613328163
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
ws2_32
inet_addr
Sections
.dsau Size: - Virtual size: 424KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dsau Size: 78KB - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE