Static task
static1
Behavioral task
behavioral1
Sample
388ad71f37e4297f9a324c947f5dd307_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
388ad71f37e4297f9a324c947f5dd307_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
388ad71f37e4297f9a324c947f5dd307_JaffaCakes118
-
Size
59KB
-
MD5
388ad71f37e4297f9a324c947f5dd307
-
SHA1
ea67712d3909c049dbe102664189c4c7955e0152
-
SHA256
b10644d3229d8780b0b2e73b30d9c775ea46d07a76637b3d4e0a7433eb0788df
-
SHA512
5b9e72650cefb6f336f9f974294eda6f4110bbdbd371ab55445655cf94db52f0523c0a33aa326ff6d4ddef5a9fad307f479c1a09aa168a05694c95f0a1b310e7
-
SSDEEP
1536:6JILZ8DR3K3jEFch2iGsoxTs9MTqyag/O9G1CffWKVoq:gGiDhyLKhcK3agQGiv7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 388ad71f37e4297f9a324c947f5dd307_JaffaCakes118
Files
-
388ad71f37e4297f9a324c947f5dd307_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
kkrunchy Size: 55KB - Virtual size: 696KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE