Static task
static1
Behavioral task
behavioral1
Sample
19cb1a2d1aef8b2ba8d758bd9b81cd37_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
19cb1a2d1aef8b2ba8d758bd9b81cd37_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
19cb1a2d1aef8b2ba8d758bd9b81cd37_JaffaCakes118
-
Size
9KB
-
MD5
19cb1a2d1aef8b2ba8d758bd9b81cd37
-
SHA1
7e1cff6716c7a86bee60f68a707fc6e9a722afbf
-
SHA256
fae47cde2e12436b5dcd4872008d1f7db0268efa1c5197b0bb325cdb751e095a
-
SHA512
b0a620db3bf79d27982dca8d4ee990a26f7b9e86e5d5948c71236733cb76d9a6fb5c68cb13086a302727aa3d3ab99b3b3fe7c4462f99b94cb462a75840ab4f19
-
SSDEEP
96:OLSCZKV4bfYOIOHJmSt7+faDWFFweMkgHc8pB:EgV4bXIOHpt7GaDC1MJH/L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19cb1a2d1aef8b2ba8d758bd9b81cd37_JaffaCakes118
Files
-
19cb1a2d1aef8b2ba8d758bd9b81cd37_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE