Static task
static1
Behavioral task
behavioral1
Sample
3046f8aa3f44827f956b987383175af2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3046f8aa3f44827f956b987383175af2_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
3046f8aa3f44827f956b987383175af2_JaffaCakes118
-
Size
32KB
-
MD5
3046f8aa3f44827f956b987383175af2
-
SHA1
0591593a47f4b083ec2d6a4a62b7b08d985d7f23
-
SHA256
ce85115ea5af8d1d579800f10b287e42daf2c47a31c697b85f8787d13eb11cd1
-
SHA512
355ed660b6e14205e84671d684aac500f42c9173053a8887b390cbdfa1f5f9b74aac9f8ba1bebaf0aca403439956187ae937206ed2f96f9d0a4b6fe1d1194ef4
-
SSDEEP
768:5GjgyRcEL6jrNPtF9TU+uRnUmp8b2p7jWzUt6/1:5GjHmEo/HLT28Cp49
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3046f8aa3f44827f956b987383175af2_JaffaCakes118
Files
-
3046f8aa3f44827f956b987383175af2_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 26KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE