Static task
static1
Behavioral task
behavioral1
Sample
22a58f8e58111a1861b87c1c5dbb06f1_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
22a58f8e58111a1861b87c1c5dbb06f1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
22a58f8e58111a1861b87c1c5dbb06f1_JaffaCakes118
-
Size
527KB
-
MD5
22a58f8e58111a1861b87c1c5dbb06f1
-
SHA1
fd7073c02b4bf3ade9e58bed641354fab303aaf0
-
SHA256
3aa63ac47066f6544230d76be97b6b522f996551c41d4fbae5e910b8e92af3b1
-
SHA512
369d801a0570888c57421eca29092f93171609f33a20f5f98a7a37eb2203f11f19ee106d390bee4c7956001552e4965ade03dc535e681eb36e083d295d8c8edf
-
SSDEEP
12288:ynp0tq9cpO75RGPk8xGiANIftz7mY7PVr9C+ipz15J:y6bu5APkAnbmzD5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22a58f8e58111a1861b87c1c5dbb06f1_JaffaCakes118
Files
-
22a58f8e58111a1861b87c1c5dbb06f1_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 519KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE