Static task
static1
Behavioral task
behavioral1
Sample
53840fcc046f95ee983c96350c31acc3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
53840fcc046f95ee983c96350c31acc3_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
53840fcc046f95ee983c96350c31acc3_JaffaCakes118
-
Size
263KB
-
MD5
53840fcc046f95ee983c96350c31acc3
-
SHA1
c0e36446c830ccd0f9973f5f5bf64435ccb1dba1
-
SHA256
a2ac00e78b88e3959a18a9dc5a3dbf9cf402c4394cfcafa844b07623da745204
-
SHA512
510004470eed8e4b496ac12f726f2d7bba6a76bb59c7a729de2e6925c1efe6d6983726bc8e03676da20a7b32fc308da5b01728d50f30f403cafbb3a08dd36916
-
SSDEEP
6144:+GVrZOl44oR+92l12tIwFJ+fp04PQkt+YK9+89fidbHT0Rx:+GVrZv4Z2L0h4Fl+YK9+89fobz2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53840fcc046f95ee983c96350c31acc3_JaffaCakes118
Files
-
53840fcc046f95ee983c96350c31acc3_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 245KB - Virtual size: 532KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE