Static task
static1
Behavioral task
behavioral1
Sample
337e58b524aa67e6e3cbb324d733b69c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
337e58b524aa67e6e3cbb324d733b69c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
337e58b524aa67e6e3cbb324d733b69c_JaffaCakes118
-
Size
325KB
-
MD5
337e58b524aa67e6e3cbb324d733b69c
-
SHA1
0c9bd9c33cdc6d8a3b0a20e05b27f03ed787f6f5
-
SHA256
5e35ebbdc22adb2333aeaf2082685fe8c1831182957d56b8900826c70a1078c4
-
SHA512
44166e5df8564356171e3c703c467818c0e1405d316f04a946b02de248e3a19494b6126b717d060155f65d1ff108d1cc1098c1d4c3c712f8e279e0a563ed7760
-
SSDEEP
6144:m0Gh0PulaFtDhqamf5UfKkMHUnGmIgEm33XBHFDU2j/Z7BrF7TiTibTA0SefE:DeSLpi5XTHihTU2j/Z/3iObWefE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 337e58b524aa67e6e3cbb324d733b69c_JaffaCakes118
Files
-
337e58b524aa67e6e3cbb324d733b69c_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 321KB - Virtual size: 392KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE