Static task
static1
Behavioral task
behavioral1
Sample
342cdeae3ac824d522d31a9a9d092a83_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
342cdeae3ac824d522d31a9a9d092a83_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
342cdeae3ac824d522d31a9a9d092a83_JaffaCakes118
-
Size
79KB
-
MD5
342cdeae3ac824d522d31a9a9d092a83
-
SHA1
c0012655ed7b98d76dd2a28b13dc0bf48c78bbe4
-
SHA256
199267f00c2fa20fa10acd2979e4debd7abc4a415963e3a540609f649a53fb2f
-
SHA512
543d89e81e92738c074b5d5c9782d6f2946a983540dbc1cf9edbe308d996b489019ed606e48291a871f92d626037c150d0198d89300fa35462c4acdde4af29cd
-
SSDEEP
1536:Xa3ome0XmDJuO/sU/ktoyjN86KyAjqVFyALPOzkefwQHP+SkOyd82z7U0quM81T5:K+N0OUU8tzN86kqryVJDHPcO2HYy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 342cdeae3ac824d522d31a9a9d092a83_JaffaCakes118
Files
-
342cdeae3ac824d522d31a9a9d092a83_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 75KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE