Static task
static1
Behavioral task
behavioral1
Sample
24d8bf86ed6eab8fbce1cfd66827692a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
24d8bf86ed6eab8fbce1cfd66827692a_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
24d8bf86ed6eab8fbce1cfd66827692a_JaffaCakes118
-
Size
88KB
-
MD5
24d8bf86ed6eab8fbce1cfd66827692a
-
SHA1
c541ac25706753cbb8cd7c93e3bb2f2f83b6d69c
-
SHA256
9647bbcdf4207f18ed17cf7acb598797c24eb1771e1b6818adfddbc194a9ebf9
-
SHA512
d7a1420a766c6f3b062e832398e25dcec4df88e36e40972a555e787ab7857276eb732e985cc2377a6a9547ee8b0a5678d11827c123e9e433a13bddff34eece50
-
SSDEEP
1536:ZQIWPOTbka7k5mAJ2BVlpNdLJsYqB1E4jpvZ4eO1ScNszXIC2c25:ZQVmTbk2ksAMlpP+bE4jpvUUVIC2ca
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24d8bf86ed6eab8fbce1cfd66827692a_JaffaCakes118
Files
-
24d8bf86ed6eab8fbce1cfd66827692a_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 83KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE