Static task
static1
Behavioral task
behavioral1
Sample
063ec692b2ef2979073c0361d040fbcf_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
063ec692b2ef2979073c0361d040fbcf_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
063ec692b2ef2979073c0361d040fbcf_JaffaCakes118
-
Size
36KB
-
MD5
063ec692b2ef2979073c0361d040fbcf
-
SHA1
7f6133efd068b09f24cddbce4b28ff528720b041
-
SHA256
6d300ad4308d47a3c7ce2e1cc46b73f44b92132b9371744b9b34c0e21959a301
-
SHA512
ddd34419585ad378a77022304ba761f70954e529deca0744aa5af957ccef47d34185b029908e5b9fe0438b318058892a954912d65b8c531964b669560a457d1f
-
SSDEEP
768:iEbpEKDzJ5KRYkYYKf8FtSlUpuX3hKQKDkqFtfEKZCL:PbpZMYN8FIUQnhKQKg3L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 063ec692b2ef2979073c0361d040fbcf_JaffaCakes118
Files
-
063ec692b2ef2979073c0361d040fbcf_JaffaCakes118.exe windows:4 windows x86 arch:x86
c9597ccf015a5e5aba7db7cf9b5f9398
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AllocateUserPhysicalPages
CancelIo
GetLastError
GetModuleHandleA
Sleep
VirtualAlloc
VirtualProtect
VirtualUnlock
Sections
.text Size: 1024B - Virtual size: 712B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ