Static task
static1
Behavioral task
behavioral1
Sample
03088b6a0914833549cd65a9d5595ef2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
03088b6a0914833549cd65a9d5595ef2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
03088b6a0914833549cd65a9d5595ef2_JaffaCakes118
-
Size
828KB
-
MD5
03088b6a0914833549cd65a9d5595ef2
-
SHA1
a694198851ce9ecabf7edbf0162e7ccbeb4ea959
-
SHA256
1ef345b63d1986d482e3190d2c9c4b7cfbbded9e4a9d32c3fa59240f4d2ff633
-
SHA512
c984c58f40ae5b96044cec95e39f1231c16f782d21ae6a2d7a0e1a1f83621c129c316395013f1ef5e18ed9089eed5f354177409d8c7fdbb778f9df13892eb03e
-
SSDEEP
24576:fUFa7K4Jy/fVtktVGPrfO/WxvaXUTcLHFpSYiVtktVGPrfO/WDS:MqMlSyfO/WxyXukHFISyfO/WG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03088b6a0914833549cd65a9d5595ef2_JaffaCakes118
Files
-
03088b6a0914833549cd65a9d5595ef2_JaffaCakes118.exe windows:4 windows x86 arch:x86
d436c55cc61e4d62b21359ff12be3c38
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
MethCallEngine
Sections
. Size: 675KB - Virtual size: 940KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE