Static task
static1
Behavioral task
behavioral1
Sample
399a41f2a1a6844880b6040d4a7dbe58_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
399a41f2a1a6844880b6040d4a7dbe58_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
399a41f2a1a6844880b6040d4a7dbe58_JaffaCakes118
-
Size
54KB
-
MD5
399a41f2a1a6844880b6040d4a7dbe58
-
SHA1
65fb259ddcbeb4e7ee420f08dbb30d77cd28a203
-
SHA256
697c22349904b1710547a2db592aa20e2f481552bb44be8f6e387a156cee2b81
-
SHA512
b33895d105aa0c09ceadc4d2a3d3ee784c552fc337728ef02898d775130173a6c8ca40292d1a337c5392b985a24bc77274f29cb11104dada4957f60ef691b1db
-
SSDEEP
1536:X12yw6uKzJ6nKwwaSyqL1JNi47e+XNe+:X1nzZgnKww9ZnNi9+X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 399a41f2a1a6844880b6040d4a7dbe58_JaffaCakes118
Files
-
399a41f2a1a6844880b6040d4a7dbe58_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 11KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 13KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE