Static task
static1
Behavioral task
behavioral1
Sample
f74d1031511b6aa62d1639132c8ccbc2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f74d1031511b6aa62d1639132c8ccbc2_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f74d1031511b6aa62d1639132c8ccbc2_JaffaCakes118
-
Size
30KB
-
MD5
f74d1031511b6aa62d1639132c8ccbc2
-
SHA1
c1a57f94a5b77ce3019a84d6ce37af26e254b6a9
-
SHA256
90ca76a7986edef28c7d78dc46d7610370b1cb5824eadd2439353290fad6d02e
-
SHA512
0e023343524c4be05ad591356ea42ec05e18ee009a66977233c6cb0ef6d1cf0cd2db02f2dc1a12a18ac93c557ad26ff249d7d8d3b94767e7c539d6f6c29b909c
-
SSDEEP
768:1qa4/tG4fexLDlpCtxs7qvUPq97q2mUtoOnRTfSU:zsexLvCtxnvdq7UtoOnRTa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f74d1031511b6aa62d1639132c8ccbc2_JaffaCakes118
Files
-
f74d1031511b6aa62d1639132c8ccbc2_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE