Static task
static1
Behavioral task
behavioral1
Sample
079006c737b6d2dad348076d59326d63_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
079006c737b6d2dad348076d59326d63_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
079006c737b6d2dad348076d59326d63_JaffaCakes118
-
Size
277KB
-
MD5
079006c737b6d2dad348076d59326d63
-
SHA1
802a3e98a3bc903eb6e075cc519c65dc4e57302c
-
SHA256
d82c42b57d8133e10ebb16b4d874ab40da91569dc0db5a8f8905d2551ce87ca5
-
SHA512
16ce7f12608c2c9e23b72ab63983d7c230a7fdd6abb18838ce47a18882c60c4cd26b875996f2d28f4b0f5aeb94c6c70c745e4724483798fb12bb3d737bc4b610
-
SSDEEP
3072:6BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBL:O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 079006c737b6d2dad348076d59326d63_JaffaCakes118
Files
-
079006c737b6d2dad348076d59326d63_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE