Static task
static1
Behavioral task
behavioral1
Sample
1afa1c8a4d8197bd9c4adb08b163273f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1afa1c8a4d8197bd9c4adb08b163273f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1afa1c8a4d8197bd9c4adb08b163273f_JaffaCakes118
-
Size
152KB
-
MD5
1afa1c8a4d8197bd9c4adb08b163273f
-
SHA1
5ac2de5b1f64fa01bb6543899ace49b34c3a4cfb
-
SHA256
31ffb7c58d75a675df00ac2552e86feb34b34d072e46d62504b6fc0b776254c3
-
SHA512
0d6ca361f804d9b51f74b3d36b386702036ae542cca2ec751463a1b8280f6660f88c30bd7f634cc107afdc176cda144facb9162f5ae1c0a2c616c5df7ba87790
-
SSDEEP
1536:kiW02fimDkS/7HMUuU1lJIU/vA5EFR7Qnrnmw3e0OJQI25Tf9uMr:LN2KmDkeDAUlI+A6FRAnxkuZfYM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1afa1c8a4d8197bd9c4adb08b163273f_JaffaCakes118
Files
-
1afa1c8a4d8197bd9c4adb08b163273f_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.scpack Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE