Static task
static1
Behavioral task
behavioral1
Sample
f7b065438594913c405597090423e20a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f7b065438594913c405597090423e20a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f7b065438594913c405597090423e20a_JaffaCakes118
-
Size
93KB
-
MD5
f7b065438594913c405597090423e20a
-
SHA1
525aa6865fb0475ee5454609e7d3d213d62bff7d
-
SHA256
55dad540da31d1f4b3bbd85ae33d1c17e81f25bb4ac0256f9b29397067599b7d
-
SHA512
0711d420adcbc84407da842ad12bc1b1f94fd1f8f7b7b90969b7fd2d578228582b5af2723ae6d24dc151f30afeebad1acf562a2e80d662dbbb6f26243cee1eb3
-
SSDEEP
768:qGihsuKtGZmeS+1B1H9oX6JHalAbyDFTbVQGSDMf1zBmQzTGfmgyqFLey1fWSq:qrsuZmh+voqdnbCf1zwQVgvFJ1uB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7b065438594913c405597090423e20a_JaffaCakes118
Files
-
f7b065438594913c405597090423e20a_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE