Static task
static1
Behavioral task
behavioral1
Sample
0b6418243768c0d99428ec685152eb87_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0b6418243768c0d99428ec685152eb87_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0b6418243768c0d99428ec685152eb87_JaffaCakes118
-
Size
38KB
-
MD5
0b6418243768c0d99428ec685152eb87
-
SHA1
f0a6cf9c5271ffb839862c9b4a5cb4a01bb10181
-
SHA256
b5f69b16414bf94b35a31a13108a865d01057e39a1b635b2c1ad61877171fea6
-
SHA512
67819a4d3c2d550df55892172513a16691178776aa80c65193bee09db43ca27fc9e1076c5ff0292ceea27e694b7129967f34322dcfcbe91b672e9e3e72104ab3
-
SSDEEP
768:81kjrJkZn8/6ZDFQ+1zAwk+a0Lq34SCJqQdv6WZlCNZJWAE3:8imhjLHO34SCJqEiWwmAE3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b6418243768c0d99428ec685152eb87_JaffaCakes118
Files
-
0b6418243768c0d99428ec685152eb87_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 28KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE