Static task
static1
Behavioral task
behavioral1
Sample
342d01a94618187053f5dd36e61749b2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
342d01a94618187053f5dd36e61749b2_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
342d01a94618187053f5dd36e61749b2_JaffaCakes118
-
Size
9KB
-
MD5
342d01a94618187053f5dd36e61749b2
-
SHA1
9df71ce3f4775e63bf8074dab20a0be916df82f1
-
SHA256
458ea7170653472ef1d5958501dfc94f451397f30f992fc5072de67bbcc1e5d5
-
SHA512
8cf17b04b5e7406b51bf0b922cc39296e069cefabd704b9840af350719bdde948050ce51a358e0916c53484cdbdb1f3cf8448d8ca0be0eef63a513167b829e77
-
SSDEEP
192:BAblskcD4s2xNMZDkcREnDH5zPDiSJAhW1:u344s27MRkmEnDH5TD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 342d01a94618187053f5dd36e61749b2_JaffaCakes118
Files
-
342d01a94618187053f5dd36e61749b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE