Static task
static1
Behavioral task
behavioral1
Sample
306e06ceed8a9b9907b84c3abd19f1e1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
306e06ceed8a9b9907b84c3abd19f1e1_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
306e06ceed8a9b9907b84c3abd19f1e1_JaffaCakes118
-
Size
55KB
-
MD5
306e06ceed8a9b9907b84c3abd19f1e1
-
SHA1
46aca722fb932ad77cc117128f9718c0dcec4f02
-
SHA256
ec9a810136d6ab92470bc248f4823880fafdfe9e223e46301a5dd21dbd579cb7
-
SHA512
1a4b4de9a4e5d53258e6bd7c0ddc3d5fa912da069c124331095970be6f83d70c127c64f1490442558687902d9229d8147f0b863c4b094fa5a3f898d8505d00e3
-
SSDEEP
768:BIa3omzpHJTjxXfOfqVncQP7/Z6Qv/0Eo3KNeW5WQgWLp9gfJUtvR1kYW0Y0VEn9:BjXFJngqmQP7RDv/096NbWT6vR1S0Q9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 306e06ceed8a9b9907b84c3abd19f1e1_JaffaCakes118
Files
-
306e06ceed8a9b9907b84c3abd19f1e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 51KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE