Static task
static1
Behavioral task
behavioral1
Sample
19647d4ecf874d9f2626b0f1fb14d43f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
19647d4ecf874d9f2626b0f1fb14d43f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
19647d4ecf874d9f2626b0f1fb14d43f_JaffaCakes118
-
Size
73KB
-
MD5
19647d4ecf874d9f2626b0f1fb14d43f
-
SHA1
45c93b0ce49ccec5a72818d46d324da5d499b89e
-
SHA256
40a47124d198ddb78c51800af927a48ac810161d645d28ee95cc8c44aa48c181
-
SHA512
036b13c271e1efece57c85cf001a2052b0b5549e705e03aff099b9982e31bc024ebaf07b82c0b6370c52dd7bb7cc3810fe7645843505c8055e0995996443281c
-
SSDEEP
1536:aZL5ngj1nqtEuFdnSuQMx/RvPjhARVUYoxgh:iL5ngBnqznSUhOVQ+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19647d4ecf874d9f2626b0f1fb14d43f_JaffaCakes118
Files
-
19647d4ecf874d9f2626b0f1fb14d43f_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 46KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE