Static task
static1
Behavioral task
behavioral1
Sample
0aff1d10b2d09fb9ea8ecbd4937c5422_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0aff1d10b2d09fb9ea8ecbd4937c5422_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0aff1d10b2d09fb9ea8ecbd4937c5422_JaffaCakes118
-
Size
1.9MB
-
MD5
0aff1d10b2d09fb9ea8ecbd4937c5422
-
SHA1
da2e23f729a5ebd94724a18aa6ca37c8a80a6c0f
-
SHA256
20b5421c7b602842f70e787b932b662aecea07dd8aa5a429c3adcb1a93243ddc
-
SHA512
8ea34293b280dc92eda6d5570c151df7e0adbe5fe24ba8f8806926493c250937df2688f235494c1330295af68506481a9256d499cdada5de155984a538df4778
-
SSDEEP
49152:YCQKYnuMcsN+h7e4oCHdNaUy+6QeeXqzwXSI5vFdy6:YqkA1JovUaQee64SOFn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0aff1d10b2d09fb9ea8ecbd4937c5422_JaffaCakes118
Files
-
0aff1d10b2d09fb9ea8ecbd4937c5422_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 1.9MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE