Static task
static1
Behavioral task
behavioral1
Sample
05d1870f05bda73635bd3080f96a8e93_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
05d1870f05bda73635bd3080f96a8e93_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
05d1870f05bda73635bd3080f96a8e93_JaffaCakes118
-
Size
39KB
-
MD5
05d1870f05bda73635bd3080f96a8e93
-
SHA1
bb8ad948e2c42690e8d34a98952a2ad75b8a0eb0
-
SHA256
68daadc63df19ba0482d5b105e0b17db82367533b86814991594adfe54bf607b
-
SHA512
c9d55cf60b8618509ab936946b7f1cba1659d8727fecb9dae644b1799ded1425c7f37313903ae1461305b6d1e3bb5724ee1feef8d65d0c1470f5f17bb562d5ce
-
SSDEEP
768:BUte/3cdxaVkslV6yKTc9u0IakFW659WJ8YUggYsjxL:BUte/cdxGiyKTIcaeW6zW6LYs1L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05d1870f05bda73635bd3080f96a8e93_JaffaCakes118
Files
-
05d1870f05bda73635bd3080f96a8e93_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 30KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE