Static task
static1
Behavioral task
behavioral1
Sample
172ee30607d2284b7a1169aec00b7a8d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
172ee30607d2284b7a1169aec00b7a8d_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
172ee30607d2284b7a1169aec00b7a8d_JaffaCakes118
-
Size
69KB
-
MD5
172ee30607d2284b7a1169aec00b7a8d
-
SHA1
276fb09a46a00052179192ded96bb617fcdc06f2
-
SHA256
786ffd2911cdef917b04e16c3d3dbae93639a3d6d17e60236f908f4f553b5157
-
SHA512
c0f6a24027146c20b1a33c4581c291558bd616f483838b68f4dd2d83057bd1edd778d376b85540edd849739bfafc1619c1d2765a31b6e411ec61de1ecb9a3cf0
-
SSDEEP
1536:Uvh/Zo0CRLDLuT+1Rucl4by7Oavduex4tANM9O1mn0Ouv4o:Y/8/IQl5OacD9O1mS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 172ee30607d2284b7a1169aec00b7a8d_JaffaCakes118
Files
-
172ee30607d2284b7a1169aec00b7a8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 63KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE