Static task
static1
Behavioral task
behavioral1
Sample
31d24aacc162722beee11a458ed9b2f2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
31d24aacc162722beee11a458ed9b2f2_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
31d24aacc162722beee11a458ed9b2f2_JaffaCakes118
-
Size
359KB
-
MD5
31d24aacc162722beee11a458ed9b2f2
-
SHA1
55137423c0b450baa2d888a8d71297946a11a191
-
SHA256
c499552004686b0c58fc40c85995d329fd3ba0493bfac84419938c302710b914
-
SHA512
35a7ab055a1f1d3b26bb5adf099470c28509ea848e02b2c9fbef84cd380adc7315280db303cc9dfc71ae716f0eec7834e7ca10fa51beed5476e67206d7ca3f7e
-
SSDEEP
6144:xvIaXIfht9s161lqv1M3UWHnS2p8OHeSNi28+1Vi3ypZrz+EReSOHkCH1:SwI6161ldpSuXn8+1Vi3yjhRMHjH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31d24aacc162722beee11a458ed9b2f2_JaffaCakes118
Files
-
31d24aacc162722beee11a458ed9b2f2_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 332KB - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE