Static task
static1
Behavioral task
behavioral1
Sample
22c98ec7e4c96e36037c8354c122938f_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
22c98ec7e4c96e36037c8354c122938f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
22c98ec7e4c96e36037c8354c122938f_JaffaCakes118
-
Size
177KB
-
MD5
22c98ec7e4c96e36037c8354c122938f
-
SHA1
00c7ffb94a11032ca2f112db2b760987d8689205
-
SHA256
dd3ef395072f21c8635523e5f856e3d4894c48cb6ff4f39973bfed901ee2c454
-
SHA512
d71729d0a846680ca8dd82a8d33956348bd410e24d8a1f4ffdd1cd54e96e489593e16d3df90aa9b68cb052f43d1bacfd1303b3c1ba3e6b6a2e9c483296abe582
-
SSDEEP
3072:+RqxsArPN4o+J5dJfRnO8fvrXhVe6uABeyelegpf8D8S7oI5QSJO2B4PDyL:+RfWq3J5zfRnOGVqFz7p/S7oIdJR4a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22c98ec7e4c96e36037c8354c122938f_JaffaCakes118
Files
-
22c98ec7e4c96e36037c8354c122938f_JaffaCakes118.exe windows:4 windows x86 arch:x86
d436c55cc61e4d62b21359ff12be3c38
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
MethCallEngine
Sections
.text Size: 9KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 119KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE