Static task
static1
Behavioral task
behavioral1
Sample
1baaeaa7ea856314abe342d19c4530ea_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1baaeaa7ea856314abe342d19c4530ea_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1baaeaa7ea856314abe342d19c4530ea_JaffaCakes118
-
Size
115KB
-
MD5
1baaeaa7ea856314abe342d19c4530ea
-
SHA1
fd7377edf2f923f6755241b7bb65418c7c6d411f
-
SHA256
9e3726ae32ff80bc0f5c455f7d7c697f40f8f34801c9c7f633773a7037834f0c
-
SHA512
2c90289a7b57d6a95e39139e2b34b7a030c9059d2ac20c88a5b1d5de62577f8a3e4106ce6ffda3d1095606a2fd871976e3110907a195dbb47d6d2101630230d6
-
SSDEEP
3072:BNJUKS7yaZ3AWbqy+9MwChzMQR4AcQ3llc:B3Uv53AWiYDvHo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1baaeaa7ea856314abe342d19c4530ea_JaffaCakes118
Files
-
1baaeaa7ea856314abe342d19c4530ea_JaffaCakes118.exe windows:4 windows x86 arch:x86
148bf55ceb3e5471ef5f9ffc2bb75e2f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect
Sections
.Love0 Size: 112KB - Virtual size: 824KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Love Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE