Static task
static1
Behavioral task
behavioral1
Sample
34dcbebfaf8107b383696046660abded_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
34dcbebfaf8107b383696046660abded_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
34dcbebfaf8107b383696046660abded_JaffaCakes118
-
Size
385KB
-
MD5
34dcbebfaf8107b383696046660abded
-
SHA1
69ae394529b240ed034bc187ce347027d69332f8
-
SHA256
50393caf28af65344b8a0fee1917ef4b3615126c92ebca0ee6b1c3bd60eed19f
-
SHA512
77035fd000a33d3fcd733b668a0410ac082f24079e65a67e6f819a913199902dba196a1552d8554aae116e6bc1fdf3e9faf22893d0150c2a8f102ef27aa4ccf8
-
SSDEEP
6144:ju6uw01COk/ekKaXEn3p9696cvSomok5+1lyyNBm4Gsl0Vs424xztYF0Gt:j+1Jk2cWz6xq5oO+fyAE4Gsl0Vs8Ylt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34dcbebfaf8107b383696046660abded_JaffaCakes118
Files
-
34dcbebfaf8107b383696046660abded_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 377KB - Virtual size: 460KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE