Static task
static1
Behavioral task
behavioral1
Sample
22d87ecb3020ef5e8eb8695ffd06c87e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
22d87ecb3020ef5e8eb8695ffd06c87e_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
22d87ecb3020ef5e8eb8695ffd06c87e_JaffaCakes118
-
Size
28KB
-
MD5
22d87ecb3020ef5e8eb8695ffd06c87e
-
SHA1
a3569b3e8a852980231a20c2c51d90bd2c3f4845
-
SHA256
efbe4facd3d1e864aa261733034c6c97e564edbf6816c4d67f98cb5513a06b41
-
SHA512
de5d6d19134a147a5da8af0925f150b005a3681fdfb0ae213d5d8769d72f47b4810cc0240f73f573c290af1d541f26c133e3fad3b85416e9310cb484db495a9a
-
SSDEEP
768:ONaIYKyk9wGM0M5KZxXUP+VzrcIQsZn5wAvXQo3zIAnSHdSLdsh/x:8YKykenLKfqcQV25DYezxKVx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22d87ecb3020ef5e8eb8695ffd06c87e_JaffaCakes118
Files
-
22d87ecb3020ef5e8eb8695ffd06c87e_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE