Static task
static1
Behavioral task
behavioral1
Sample
8f4f52279db3eedc7cdaa1f229ebb91d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8f4f52279db3eedc7cdaa1f229ebb91d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
8f4f52279db3eedc7cdaa1f229ebb91d_JaffaCakes118
-
Size
107KB
-
MD5
8f4f52279db3eedc7cdaa1f229ebb91d
-
SHA1
2c06ca94a692863099d6bf5db6e8af26ee72d53f
-
SHA256
06bde76b1a6b1627f2aa82fb5fb7f756edce32519607c4d6b9108b1bf6412401
-
SHA512
dc219c1f01eb2baf79b92ebb500204a742d97e2b0963bc4f37424d63d594c555732921f6151905d2c9b319274b27bf2e0ff719cbfe894517603e0e83f33a1f7f
-
SSDEEP
3072:FqTn4EsPVigXmTEKDfx6wW86PT3GMWvji:sTnoV1XmTEoQIzj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f4f52279db3eedc7cdaa1f229ebb91d_JaffaCakes118
Files
-
8f4f52279db3eedc7cdaa1f229ebb91d_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 102KB - Virtual size: 904KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE