Static task
static1
Behavioral task
behavioral1
Sample
01db241400b3edc15fbe0283b803e195_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
01db241400b3edc15fbe0283b803e195_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
01db241400b3edc15fbe0283b803e195_JaffaCakes118
-
Size
87KB
-
MD5
01db241400b3edc15fbe0283b803e195
-
SHA1
82ceccac85b627d29bfea13d22c2d27f13f360d1
-
SHA256
51999df0233f8febadd3bc9c2897363e3571864578174e569faf1d6a23762ba7
-
SHA512
3ada5899c2d347091641243fdd346b9d227470ffdd5fc45eb16f40d40eb520238a3758eb3a88db2f279e4324c2ad273b7a3eb849b1bd5a3acc7a1e8e324e02b2
-
SSDEEP
1536:SnSFyJnkAogw7s0/ztmOQEZ7DzbyM86K7CE4ouoTlzKCHkgqNfFF8Plty:xy8sAtPQ47eV6K7CE4ozTl/HdgfFWPq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01db241400b3edc15fbe0283b803e195_JaffaCakes118
Files
-
01db241400b3edc15fbe0283b803e195_JaffaCakes118.exe windows:4 windows x86 arch:x86
0b0e0946424e7bf5939d8dc3121ddbd1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
VirtualAlloc
VirtualProtect
VirtualFree
ws2_32
send
Sections
.code Size: - Virtual size: 436KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 86KB - Virtual size: 88KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE