Static task
static1
Behavioral task
behavioral1
Sample
32784413e7b35e5c11ee1235d448cdac_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
32784413e7b35e5c11ee1235d448cdac_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
32784413e7b35e5c11ee1235d448cdac_JaffaCakes118
-
Size
275KB
-
MD5
32784413e7b35e5c11ee1235d448cdac
-
SHA1
ac7205d600780d18dea46bbe015c87be3c2955f8
-
SHA256
0abfca933705fa5a978f91ef83fb57f678caf4b896d47726521680348e53c894
-
SHA512
eb0a661835da29774a6f6e7cc2b143c3532e41b94f990b77ecdbc80692d5101a09fb94ce4e96e135752f884cadcbb6b2ea6d27ebfdfbbdc8aae742004b012905
-
SSDEEP
6144:7oi8PtOUifQOMOICLByaL5y91yuDlE1j4vr9dBDkuZwKo8U:lwO5PLBxLU1ZxSer9EiU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32784413e7b35e5c11ee1235d448cdac_JaffaCakes118
Files
-
32784413e7b35e5c11ee1235d448cdac_JaffaCakes118.exe windows:5 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.ihyzwr Size: 40KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.etszwj Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bmb Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ