Static task
static1
Behavioral task
behavioral1
Sample
e3319a681968a8ae69692d69bf3b0f3e_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
e3319a681968a8ae69692d69bf3b0f3e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
e3319a681968a8ae69692d69bf3b0f3e_JaffaCakes118
-
Size
311KB
-
MD5
e3319a681968a8ae69692d69bf3b0f3e
-
SHA1
6ebd34638a3c4a23048f127184451329c0230a42
-
SHA256
c5d1220fd04ceff244ad21b37d2b81042866af55cdf4628e79a4e6b88ff05811
-
SHA512
967ff2a52a2e6c1fbd93a078d98e0b9abbe1e839bf2a8c0796bc3774e23efbd3e3d88311348ae5d0ca4c93e7bca8462b4a6363c9692e62312a8b5c74f408d1e8
-
SSDEEP
6144:GA96zRDy/LCRrCwOlM79pHZ3igHz8Xgv7UQY57U7pI8CyAoTHV42aK8lF0:lg9c2r79/78Xgv7UQY5KWyNTy2S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e3319a681968a8ae69692d69bf3b0f3e_JaffaCakes118
Files
-
e3319a681968a8ae69692d69bf3b0f3e_JaffaCakes118.exe windows:4 windows x86 arch:x86
119ba01abad812c4a461368344bcd6cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
RtlZeroMemory
VirtualAlloc
VirtualFree
VirtualProtect
Sections
.pepsi Size: 308KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE