Static task
static1
Behavioral task
behavioral1
Sample
153099c659a2b8de1c9cc25d5752c3a8_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
153099c659a2b8de1c9cc25d5752c3a8_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
153099c659a2b8de1c9cc25d5752c3a8_JaffaCakes118
-
Size
197KB
-
MD5
153099c659a2b8de1c9cc25d5752c3a8
-
SHA1
1df4ea3d4b27d9c8ba807f9046272a7aef9aeac6
-
SHA256
59780db7244d74289f0ccec0471aebe1178b72a089d1e4243701858c180f95bb
-
SHA512
4eb72c6f335bcc02c7bf1f4193aa9ed100cbb8e28dbf346a7a41a9c4b2fcbfef45b1a168af51ea0e6d140505f789cf237d14b7f3adc9b4c62066c834e8885f12
-
SSDEEP
6144:NuGgVMPg36G4+hysFzNJMK0APAKgit3lBAXIf5X:HCMPg366/Fj08lBMIp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 153099c659a2b8de1c9cc25d5752c3a8_JaffaCakes118
Files
-
153099c659a2b8de1c9cc25d5752c3a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 186KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE