Static task
static1
Behavioral task
behavioral1
Sample
367b0f317cba712b2aaa92c1a07db75d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
367b0f317cba712b2aaa92c1a07db75d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
367b0f317cba712b2aaa92c1a07db75d_JaffaCakes118
-
Size
92KB
-
MD5
367b0f317cba712b2aaa92c1a07db75d
-
SHA1
93f95ffe5e74d4473df092290763b18cc2b362d6
-
SHA256
927466249dab7f2f1ed4f066a8489687044c5e8342e9d13ba83bb7a46d191877
-
SHA512
6c8777641887c47d15c4dd69228e5a5ed523e2dee20935043ae5fe8119b3c6e5a28dfabf11480e9a7bda7806184dce7bdc966048684ee6f19bdba3c71e298422
-
SSDEEP
1536:hefsyGKYdoFicb37geVLZN1fxHNtybCFEzmG10mZFaOX/DBAx6L6x1Gp29BTCgo:MkyOGZ7/Lr15NEZCm2OL+xAiPTT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 367b0f317cba712b2aaa92c1a07db75d_JaffaCakes118
Files
-
367b0f317cba712b2aaa92c1a07db75d_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.MPRESS1 Size: 82KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE