Static task
static1
Behavioral task
behavioral1
Sample
309d6efdc41663323a4131a70e40fc5a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
309d6efdc41663323a4131a70e40fc5a_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
309d6efdc41663323a4131a70e40fc5a_JaffaCakes118
-
Size
91KB
-
MD5
309d6efdc41663323a4131a70e40fc5a
-
SHA1
e4b31b2fad6c4820b6d6d541a0d42fafc79845ce
-
SHA256
75817ab701d1db29d9b8eed1c10e783aa55dce66c4f3fb66bae2325e2594058a
-
SHA512
28386daa7a8c8b5cd424ca3e8d9a4f788cd4dc854b3ccd0bb0adc3943d151a99dc6b7dad1cbc797f3051235acee9b835c83459b52d7b52ae379566b992f6b1a8
-
SSDEEP
1536:JvcntHye3l5jeELUIh4QjYnQV6/2DcNEBGVQsSK88sWUfaz1znqnI0n:JvaEez60UIaC2Qq20eGtSKWMYnl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 309d6efdc41663323a4131a70e40fc5a_JaffaCakes118
Files
-
309d6efdc41663323a4131a70e40fc5a_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 86KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE