Static task
static1
Behavioral task
behavioral1
Sample
0dfb8f6ef39205007cde52909dab7f38_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0dfb8f6ef39205007cde52909dab7f38_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0dfb8f6ef39205007cde52909dab7f38_JaffaCakes118
-
Size
264KB
-
MD5
0dfb8f6ef39205007cde52909dab7f38
-
SHA1
5686687ec26e058179f303a2132ff3e49fc4ddca
-
SHA256
645c99c7987452d208e3333c83c95a7f34b88ce848269c8e9f946995761f1f74
-
SHA512
08ff7989ac23a3a6f696ca5cb07b2299cfdb05f0e30dd59d81e8e59a462b3acb3e1d23620d132f567b443525f2e97b44af7355daae28f3e640d1416fd95a691d
-
SSDEEP
6144:5DzF0RVEpbkoj3KpHm1LqsILIjbU1vXPNHk4RcvI59yYZJ5e:59kVE1bam5qnIjwRPRcKNZJ5e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dfb8f6ef39205007cde52909dab7f38_JaffaCakes118
Files
-
0dfb8f6ef39205007cde52909dab7f38_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 257KB - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE