Static task
static1
Behavioral task
behavioral1
Sample
323e02ccfe7c8bb29df9914a78a8b67d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
323e02ccfe7c8bb29df9914a78a8b67d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
323e02ccfe7c8bb29df9914a78a8b67d_JaffaCakes118
-
Size
138KB
-
MD5
323e02ccfe7c8bb29df9914a78a8b67d
-
SHA1
362bfe3f7cb8f51f5a58713593d7606b0a422c62
-
SHA256
bb2d2ecdd97860c8353894076523276f9aa8054d0c44f2b6052fbdf58cfda4a0
-
SHA512
08a16e16df16b405fb2d289676f3da820f4e2c09a409f579bfcda59543aa47b4e24788d8e5f1f10b625ae1f0f24c16caf4b78369585536fb351e613df6d1820e
-
SSDEEP
3072:W/M+KLTtOyJUh3okU7HqObUVHN+RHAK/H0qgZfYN:W/sOyUh3ldObpgKvmZw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 323e02ccfe7c8bb29df9914a78a8b67d_JaffaCakes118
Files
-
323e02ccfe7c8bb29df9914a78a8b67d_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
0 Size: 108KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE