Static task
static1
Behavioral task
behavioral1
Sample
254409702fb8157407045b712d15e10a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
254409702fb8157407045b712d15e10a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
254409702fb8157407045b712d15e10a_JaffaCakes118
-
Size
36KB
-
MD5
254409702fb8157407045b712d15e10a
-
SHA1
c2c27a7596f0da096d85a6af7c87ce4d6683bdf3
-
SHA256
1c20084c7f7d5dd617c91080e5ca34754d817bec91eb7b7d19e1766096ed8df3
-
SHA512
b4d9287e3a8c3229a65c9f4bbc0ee71d4bf6ed3e5c5a5d08c62fde00d0a8aebbbaafee8ccc8ff3475c1e35f28fd0fe240d14fde421ebc89ac45fd7396e290546
-
SSDEEP
384:2+CBHQxckWe/ifHfEsiWp2HkgTgq8+kajaiVBwOryHie7Al01wxvQNJ/QbLJySoi:7CJtkWqivfhE+arO7Y01KJySd/D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 254409702fb8157407045b712d15e10a_JaffaCakes118
Files
-
254409702fb8157407045b712d15e10a_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 24KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE