Static task
static1
Behavioral task
behavioral1
Sample
01936133b65f8b5131530a84617b1743_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
01936133b65f8b5131530a84617b1743_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
01936133b65f8b5131530a84617b1743_JaffaCakes118
-
Size
73KB
-
MD5
01936133b65f8b5131530a84617b1743
-
SHA1
a020a7e2ef2a4aad565a662e77b9dba793d34898
-
SHA256
e63e30ae2a91f59d557df05036f644b6af9c2f266e5e9f4f469f060f0f6cd73c
-
SHA512
d841aa24c61c86fc3cf33ca9c0a52d3e210f108ef854039c6659c8219e5b45c966d13b439d319bcb6b7381b621184b6330e65b10a29485f1086a931e6a2b30ad
-
SSDEEP
1536:jFuog2FnNaHyQ9xWZeHV5b5D1iUf7heOSfuao92Wqpw/8:BuHwYyEHVDTf1edGaq2t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01936133b65f8b5131530a84617b1743_JaffaCakes118
Files
-
01936133b65f8b5131530a84617b1743_JaffaCakes118.exe windows:4 windows x86 arch:x86
aa77d18b40072a7e1dc36630aafffd27
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcAddress
LoadLibraryA
VirtualProtect
Sections
#�^?O�� Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��Z�u��? Size: 1024B - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
?˗8t Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
}�ڝt�� Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
By��< Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ