Static task
static1
Behavioral task
behavioral1
Sample
13a3589078bc41df3ef5a54fa9f29255_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
13a3589078bc41df3ef5a54fa9f29255_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
13a3589078bc41df3ef5a54fa9f29255_JaffaCakes118
-
Size
29KB
-
MD5
13a3589078bc41df3ef5a54fa9f29255
-
SHA1
dd441b75a32911e1e33fc70eaac0255fbd3b5e80
-
SHA256
f570427315a2cc3596cff67a8026a388b154ffe0ea4ea80fc3f331d1c1ffca32
-
SHA512
d225cd850bbac182448d6846ad0d1b549df48399fb2c6d4ae75694585895ea417d0828faafe354526e17610628c1f2385d6831f37d6f1b233d7c72b44efc0a0d
-
SSDEEP
768:EqtGnjumP0lQRggUwNXHeVUEgyIJw+50n+Bcb1:Eq8jublSnURaRfJw+5dBcb1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13a3589078bc41df3ef5a54fa9f29255_JaffaCakes118
Files
-
13a3589078bc41df3ef5a54fa9f29255_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 24KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE