Static task
static1
Behavioral task
behavioral1
Sample
077d409e1f50fe7febb0c02998a70890_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
077d409e1f50fe7febb0c02998a70890_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
077d409e1f50fe7febb0c02998a70890_JaffaCakes118
-
Size
1.1MB
-
MD5
077d409e1f50fe7febb0c02998a70890
-
SHA1
62efa95ac94db980cc208bc1b4599e3c41812e98
-
SHA256
c9504f8f052420539325924b53d7347ad67d57c2c33094f6ecdc6d75a4766873
-
SHA512
e2c31fac479cef0a7c1cc46d71f4e878ea3a27481d4f5ce258194922a9cfd7c9ab2afde677577fcd1ebb2e7bb1ad120db2fb8148b179ec2a366293403133242b
-
SSDEEP
24576:xXqt5G6LufgnADKLlakDD6aMaAMa8uYOi2:x6jGIufgAD4YbaM+2i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 077d409e1f50fe7febb0c02998a70890_JaffaCakes118
Files
-
077d409e1f50fe7febb0c02998a70890_JaffaCakes118.exe windows:7 windows x86 arch:x86
2c1a6319e98e0fa2f91dd1a4e50c4909
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ExitProcess
GetHandleInformation
GetCurrentProcessId
VirtualFree
SetHandleInformation
OpenProcess
VirtualAlloc
Sections
.text Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 375KB - Virtual size: 375KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ