Static task
static1
Behavioral task
behavioral1
Sample
268dba57e597e66aa5d9d82533c906dc_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
268dba57e597e66aa5d9d82533c906dc_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
268dba57e597e66aa5d9d82533c906dc_JaffaCakes118
-
Size
67KB
-
MD5
268dba57e597e66aa5d9d82533c906dc
-
SHA1
6d5aceae6ba20d75696d73b22c52ce4e83f71e73
-
SHA256
d6c0690f04db1507c211f8f95e9d3c91363b376a74e36059c19c224281bbaa2f
-
SHA512
33a7350c7e78319d299859538f1bab74686491b3fa25b7a310262c9e04a933d1eefa1b18ed8552f4f38d0fb8e0be972cf63993417df8393503457a4f6f6dce08
-
SSDEEP
192:WJ5/LzXJqq4nboT6nbTvqPao3lQtQgp0sXiyzEon91PKZP9C6Cqr6:WrDTJc0YHzSghEoPPKy6P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 268dba57e597e66aa5d9d82533c906dc_JaffaCakes118
Files
-
268dba57e597e66aa5d9d82533c906dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
316f9661c85558da7e0cc9df6322c345
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
VirtualAlloc
Sections
.text Size: 1024B - Virtual size: 552B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.3rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE