Static task
static1
Behavioral task
behavioral1
Sample
301e0cdb9de64a7abe8ea5d2a825c610_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
301e0cdb9de64a7abe8ea5d2a825c610_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
301e0cdb9de64a7abe8ea5d2a825c610_JaffaCakes118
-
Size
32KB
-
MD5
301e0cdb9de64a7abe8ea5d2a825c610
-
SHA1
87b0b5a985deec96d572c3029c2fd87f9b011f21
-
SHA256
5334e964f67075535e757c0482c54680dd50785dd36241e55e34762b9cbc04f9
-
SHA512
833bec95f508162c4bfa7e00baa6b06e1da0db0957097eb5ab81974aeef1a40363a4f3947217962161d1e84b339e8cc01bf35aaf8a23717e8ce9db94ab83d509
-
SSDEEP
768:T5Kx2WMs9PI0irZ49mxyPeKq5pkdiRni:9KYvYI0C+mcWKq5pkdCn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 301e0cdb9de64a7abe8ea5d2a825c610_JaffaCakes118
Files
-
301e0cdb9de64a7abe8ea5d2a825c610_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 16KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE