Static task
static1
Behavioral task
behavioral1
Sample
364a559409e2115feef4a410fb1ca478_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
364a559409e2115feef4a410fb1ca478_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
364a559409e2115feef4a410fb1ca478_JaffaCakes118
-
Size
25KB
-
MD5
364a559409e2115feef4a410fb1ca478
-
SHA1
8fc2195cecd7ae2f6fad5ac2704c43f7a5b04700
-
SHA256
ce8127ec9a71499e317181d21922a536c330ac2118bd7ea73115d6991bb0dee6
-
SHA512
407f7431586abc0aef4becc7da02a519ac09f8be95cdae2547442e283378f266fdfdaacd965b0575edbf178868afcd4519551725110c1f62b09b05450ef3fc78
-
SSDEEP
768:I9HdFZ+RNqrtjDvmfm8DSHltgxWxy3UxVBbuS:IBZ+GbmfgHltgxvKVl9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 364a559409e2115feef4a410fb1ca478_JaffaCakes118
Files
-
364a559409e2115feef4a410fb1ca478_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 18KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE