Static task
static1
Behavioral task
behavioral1
Sample
32367b3605b264f9d0dda0550f112a4f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
32367b3605b264f9d0dda0550f112a4f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
32367b3605b264f9d0dda0550f112a4f_JaffaCakes118
-
Size
1.3MB
-
MD5
32367b3605b264f9d0dda0550f112a4f
-
SHA1
1059b1cc7c304465810e0195ba0188a606fb953d
-
SHA256
3240759dc1f22a75c2273ede4630a4ca5c81d90c81ec325342b25be20fec9520
-
SHA512
e5ff243c2480f8a97e6fc870444cf4b18044740189ea034be45a3f1a8b67f9d871cb1cffcb732fd622e161b6d8ffa0517155d79fa8f218f02f3ad4516a972d9b
-
SSDEEP
3072:EjG4pPhLI1zwLv/2IfwNegin8XVmbB6vTg0PeGM3UqFyHm3LCcjMi2:yG0PhLI1zHIjginiV6aeT3UCLCcgi2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32367b3605b264f9d0dda0550f112a4f_JaffaCakes118
Files
-
32367b3605b264f9d0dda0550f112a4f_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE