Static task
static1
Behavioral task
behavioral1
Sample
14824b40fbea4bac326911dbf7974686_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
14824b40fbea4bac326911dbf7974686_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
14824b40fbea4bac326911dbf7974686_JaffaCakes118
-
Size
59KB
-
MD5
14824b40fbea4bac326911dbf7974686
-
SHA1
66bd56def0540c7e9cabfa30d6c26bc68bbb8084
-
SHA256
7b368ed9d080f23a108f63989c30980299b0879d45588b9603d1fe351d5962ee
-
SHA512
13d867f4085ee5acd69a4b5a5e006ff1b799873f58e1688326157e99045f50ca7db37abb6830243b59813068c481057d13635c5dd5ad6849398f89834e542d61
-
SSDEEP
768:tcFVCeZFq7tjPHSqqNjBPcnVgke1UQqMFfSzvgGi3EE77QusvCfl5j0fgmJynd/:csG8zHtqNeR6w86zvvi3bI/vCf3wCnd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14824b40fbea4bac326911dbf7974686_JaffaCakes118
Files
-
14824b40fbea4bac326911dbf7974686_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 49KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE