Static task
static1
Behavioral task
behavioral1
Sample
1a02778599dbbbbbfd688641206e5799_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1a02778599dbbbbbfd688641206e5799_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1a02778599dbbbbbfd688641206e5799_JaffaCakes118
-
Size
34KB
-
MD5
1a02778599dbbbbbfd688641206e5799
-
SHA1
82e603dfaac94b870bd3e39c1adb95b73b15fadb
-
SHA256
55fd51fa19ac9f363e4f9220de8b3c06b7fbfda0891860939425267141c0f584
-
SHA512
0cfdad69c2001461a050dbb39de9fe1bbc2d7ac481a3cbec7f0fc91e4b1ada3b542b78bc80596bd18cb8274fcf1745d34f9d930b512827594f482eb42c6b31dd
-
SSDEEP
768:nVNbIApKWVdLWU909E9m46LihMC3c021PF0riLd/:ncMKgdLa4jMCs02r0rod
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a02778599dbbbbbfd688641206e5799_JaffaCakes118
Files
-
1a02778599dbbbbbfd688641206e5799_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 23KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE