Static task
static1
Behavioral task
behavioral1
Sample
23501ba8277ce3a96571ce8bccaddf0d_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
23501ba8277ce3a96571ce8bccaddf0d_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
23501ba8277ce3a96571ce8bccaddf0d_JaffaCakes118
-
Size
17KB
-
MD5
23501ba8277ce3a96571ce8bccaddf0d
-
SHA1
d0352c829e572eca90bf4a61fb8698587793656f
-
SHA256
027d4d385f2ff102e6216417dda1f189cd21bb9e043b22bc3314762b7a48d7b9
-
SHA512
31327cdd622c09c565831b2e46a08f21249ffc48d38de710d0c6ca9345350d37daea118890646584b66ec8c20b207e790c1f5a5a848721b2a170170f49df1279
-
SSDEEP
384:6nImY3BwunKC9ykaZx6vso/4SAxkPwI98NRs:wImd4KMJatn24O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23501ba8277ce3a96571ce8bccaddf0d_JaffaCakes118
Files
-
23501ba8277ce3a96571ce8bccaddf0d_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 12KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE