Static task
static1
Behavioral task
behavioral1
Sample
3aba256bc319a0e4222b90e9cb0b0f96_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3aba256bc319a0e4222b90e9cb0b0f96_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3aba256bc319a0e4222b90e9cb0b0f96_JaffaCakes118
-
Size
74KB
-
MD5
3aba256bc319a0e4222b90e9cb0b0f96
-
SHA1
27520b90f2018597fe12ab6d2693f481632b9465
-
SHA256
f327cad14f9b4ffb7c2976e30a9c07ed4cc07f7f397e315cc3a8f4a3d4e681cc
-
SHA512
e35e50429fc1be26ec4054d614d80179821e7b3533d07c905dbb202605397b85903cb9c8581bdbdad3b91a58ade422251872642739168805464268e7507249a6
-
SSDEEP
1536:6aCsdvQi3R4vOYBJ30H/F7Xt+day7rr1qa0t6VEwPXnIISMcd:6a/vh0dS+435cVEwfrw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3aba256bc319a0e4222b90e9cb0b0f96_JaffaCakes118
Files
-
3aba256bc319a0e4222b90e9cb0b0f96_JaffaCakes118.exe windows:4 windows x86 arch:x86
827ae9e92f0226e668e5b65613328163
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
ws2_32
inet_addr
Sections
.1265b Size: - Virtual size: 424KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.1265b Size: 74KB - Virtual size: 76KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE