Static task
static1
Behavioral task
behavioral1
Sample
35e1b02180b24b573bb3cf750cfc6d77_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
35e1b02180b24b573bb3cf750cfc6d77_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35e1b02180b24b573bb3cf750cfc6d77_JaffaCakes118
-
Size
34KB
-
MD5
35e1b02180b24b573bb3cf750cfc6d77
-
SHA1
1178bfa7c6e374cb4576300fdd02996d6b0d27eb
-
SHA256
d10b0da04d0c19e90d2d78c9e72f6662a3877e2eb81efa8e13c07ea71545e2cb
-
SHA512
6d849436c58228e646663542a3a5c80cc56619e244adf3559b0b2f9cb02b1ff9edfae9438e9b4feb70a369c110ae9ca3743f2a30494192565f725b12663758f1
-
SSDEEP
768:uTq8qum1uVerd695OTBcaGUUEX0jivb8R65N:usu5VI6KKaGAKsIR6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35e1b02180b24b573bb3cf750cfc6d77_JaffaCakes118
Files
-
35e1b02180b24b573bb3cf750cfc6d77_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 16KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE