Static task
static1
Behavioral task
behavioral1
Sample
275aefe387f8b89ec97e5199bf307734_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
275aefe387f8b89ec97e5199bf307734_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
275aefe387f8b89ec97e5199bf307734_JaffaCakes118
-
Size
47KB
-
MD5
275aefe387f8b89ec97e5199bf307734
-
SHA1
84195370fc68350ecf34a9f4d6657b69be35321d
-
SHA256
3f09cdcb8affba1004be2f97c96f92c86d974fa8a0996587ab868b147889d6cf
-
SHA512
d034d50589c262e29c236894913821685796a76d13b65d6497eaf5b8deb20903ff18904c7471830b21cde6687ee8ded3bb30cae4c92ba85f2b490476113403e0
-
SSDEEP
768:XNIa2PhMQKZCUYAcm7spbVLiIz8GS1uu3CDNeUNE8Tt/mcv22nq31gbBgKDyFAtL:dIzPy4R7dVLDz8BUlGGX6Kdtg6v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 275aefe387f8b89ec97e5199bf307734_JaffaCakes118
Files
-
275aefe387f8b89ec97e5199bf307734_JaffaCakes118.exe windows:4 windows x86 arch:x86
0714a01e64370082cc89c61bcdf5fe95
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
RegisterServiceCtrlHandlerA
ole32
CoUninitialize
oleaut32
VariantClear
Sections
.text Size: 41KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE