Static task
static1
Behavioral task
behavioral1
Sample
33b3fe517e8be68fc22c07acadb258c5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
33b3fe517e8be68fc22c07acadb258c5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33b3fe517e8be68fc22c07acadb258c5_JaffaCakes118
-
Size
30KB
-
MD5
33b3fe517e8be68fc22c07acadb258c5
-
SHA1
0737d53e7ca9f773e80473512ea162f94502322a
-
SHA256
84ed4d2efd2b927bcce7c65f3de89264fcad01044624553aff45b77dc7d81acc
-
SHA512
e40e710a7b334bb28a9d68ed7cca90369036e1244e5fbca54bb0ed76b964050146ed94c9cfdc069e2f714a570f67464a3e67181f4a79f8e02623da1ce8e030dd
-
SSDEEP
384:gBq7ms98wTpCgoU6Cfb27fXcAlw9KtVCPqyzqrYBxGjQVOr565PMm90lO0D8CJc3:gBqasqspXoscfsV4kqsXyQnPtT0c2q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33b3fe517e8be68fc22c07acadb258c5_JaffaCakes118
Files
-
33b3fe517e8be68fc22c07acadb258c5_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 11KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE