Static task
static1
Behavioral task
behavioral1
Sample
0d5718dd200bf7a99b73fd39bff05bfc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0d5718dd200bf7a99b73fd39bff05bfc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0d5718dd200bf7a99b73fd39bff05bfc_JaffaCakes118
-
Size
21KB
-
MD5
0d5718dd200bf7a99b73fd39bff05bfc
-
SHA1
6ad8ee8569b65ac8be0d6dd5e3a01a5c966b47ab
-
SHA256
fdc72eab8b39163ebf06440600b561e7a009fa978031947876dfbbab2c63c3bd
-
SHA512
b37de279d36384f48cce59acd1cd10fba1bd34f9e1492edcd1f96c9cb602a94b15bb12b0806fd95c6eddee35a6d2c2af975a704437e37f0bed8044da82dfea05
-
SSDEEP
384:yB6xcHUwT9FIrTSt2xZU5Wdf1bmGHsBfP5Xwfs2Dj5ykqNovxFe1A55G/:yB6xcHUwpIJx9HmzfP5Xwfs2BvtxFaOG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d5718dd200bf7a99b73fd39bff05bfc_JaffaCakes118
Files
-
0d5718dd200bf7a99b73fd39bff05bfc_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 16KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE