Static task
static1
Behavioral task
behavioral1
Sample
1bc381d03a473bcf14b227b2874462d1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1bc381d03a473bcf14b227b2874462d1_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1bc381d03a473bcf14b227b2874462d1_JaffaCakes118
-
Size
358KB
-
MD5
1bc381d03a473bcf14b227b2874462d1
-
SHA1
206aff5a26bc63dccbddd30556a7336e5e2a2216
-
SHA256
5e8b6f6cc1b2f99b0980b0d2ede59da16f9b56bccb04c2b314b62ae95b01a7d5
-
SHA512
31378b87b410086dbcf09ac7f14d950258af53501a53cb46f8b6f637e4aafc72eb5082f3a69e8fba56970afa16e387d554764fb3a9c90259b2ff2ea37b6bc340
-
SSDEEP
6144:6Y9f0uAKLoUbtt1XQ7ZiJweINuvPt8iXtgxGyxbNpEqN3lhyA9zsIsWTw:XlJDQFiJwvuuidoGwbN14AZ/s+w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bc381d03a473bcf14b227b2874462d1_JaffaCakes118
Files
-
1bc381d03a473bcf14b227b2874462d1_JaffaCakes118.exe windows:4 windows x86 arch:x86
4d8e9e06f8e51550e3e5089179e9846d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
Sections
Size: 259KB - Virtual size: 772KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE