Static task
static1
Behavioral task
behavioral1
Sample
335169f94804445895e8c668263311d9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
335169f94804445895e8c668263311d9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
335169f94804445895e8c668263311d9_JaffaCakes118
-
Size
150KB
-
MD5
335169f94804445895e8c668263311d9
-
SHA1
062c0cdbdc2a809a3aaf7af2d57e07823695d6a4
-
SHA256
affcb8ff1e1269d9e512e7415fae5821d035b1965eddd7844da08af11754065b
-
SHA512
db1f49dde248f716a45b0f34e8c21f3de7b74e0ce6f46c1ba0c264e0db7c5970f0b1bbb7efb2f883c3513c5e60408a45d292dc9a8c1ebd698be6c66accd1dd8c
-
SSDEEP
3072:bJKo+x+iTQ4m/Y+2VUsC6tjE5ESWsc529jI4G:dKos+iM4mayFgjE5ESTc5T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 335169f94804445895e8c668263311d9_JaffaCakes118
Files
-
335169f94804445895e8c668263311d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 142KB - Virtual size: 560KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE