Static task
static1
Behavioral task
behavioral1
Sample
34dfd223c44d4e3c00f55937d816bfff_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
34dfd223c44d4e3c00f55937d816bfff_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
34dfd223c44d4e3c00f55937d816bfff_JaffaCakes118
-
Size
106KB
-
MD5
34dfd223c44d4e3c00f55937d816bfff
-
SHA1
59adf962bad9c1f8f32e44bef03112bb1c06eb7a
-
SHA256
187e35bb0d39e807c50bd0c205e2770beaa59a40a1b829dab994890ecb627372
-
SHA512
4fb7487eb8ab07921d144ceb8dbada4a8c81b25aaf86ce3af6369dbae74701aef960d1435ccc1b73bcf1159069f32f0e55d7b41e02baa859509d85747188662f
-
SSDEEP
3072:Y2f+SGoL4+Uawd+VxI5edLYNT/bfmNT9iq5:Y0Z3L4X5PeZ8XwT9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34dfd223c44d4e3c00f55937d816bfff_JaffaCakes118
Files
-
34dfd223c44d4e3c00f55937d816bfff_JaffaCakes118.exe windows:4 windows x86 arch:x86
a53f732e1bbd70e2b3217e8d53ce6afb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
Sections
pec1 Size: 73KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE