Static task
static1
Behavioral task
behavioral1
Sample
184c690cc13c005459a7cbf679e60ea1_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
184c690cc13c005459a7cbf679e60ea1_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
184c690cc13c005459a7cbf679e60ea1_JaffaCakes118
-
Size
32KB
-
MD5
184c690cc13c005459a7cbf679e60ea1
-
SHA1
8cde42985900f61843f8d85b3589a79fcbe85cb6
-
SHA256
5f84dac3cfa2091f18aad228355e69fe8cee27ed3ac0f8b6b58799cd8b77ed08
-
SHA512
ef2cb994e259a93c93afef69c73a1f707815224de90e5159b952792e9faf87d1debcf97c0b72ef1345b2be45ef5478658ef287034e182ebc9cf92613e3eb3d6e
-
SSDEEP
768:AN8DaKvHaTng320TtKafT2DCfYMVuBLSKmzXeg2HHgK58JWAEcf:AN8DpHaTI2SKar69MGLSKmvFAAEM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 184c690cc13c005459a7cbf679e60ea1_JaffaCakes118
Files
-
184c690cc13c005459a7cbf679e60ea1_JaffaCakes118.exe windows:4 windows x86 arch:x86
64ec96504263663d92a6d0c350e7d59b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32.dll.
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE