Static task
static1
Behavioral task
behavioral1
Sample
429ba0fd66f0b48e1fa7aaab3f48956c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
429ba0fd66f0b48e1fa7aaab3f48956c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
429ba0fd66f0b48e1fa7aaab3f48956c_JaffaCakes118
-
Size
368KB
-
MD5
429ba0fd66f0b48e1fa7aaab3f48956c
-
SHA1
d9ebbaae53d432a95e9066f6c8d954f87a924152
-
SHA256
8376e12b6e21b48fdfcfa8fc74b44ce16a9ed017ada8d3b15c636e2039f7add0
-
SHA512
d14a0223b511e7d9982497765726fc76888237c6b65a833223e7fa7e1f4f6877d2dca539d36faa03a67a1f6fa88f061ffbeacf250c630c698ff8eef7a5f5f8d5
-
SSDEEP
6144:Hv3Wn4iQUh43ts/oCjtVvTLjswOpFIBa3wYdQLOViKDDK6BRLskKclL4goA3:H/Wn7ph4C/om7bLGGBaldQgD2cWYl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 429ba0fd66f0b48e1fa7aaab3f48956c_JaffaCakes118
Files
-
429ba0fd66f0b48e1fa7aaab3f48956c_JaffaCakes118.exe windows:4 windows x86 arch:x86
7b2bf80b121f571eeeab79a447c87dfc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetProcAddress
LoadLibraryA
LockResource
VirtualAlloc
VirtualFree
CreateFileA
GetTempFileNameA
GetTempPathA
CloseHandle
LoadResource
GetTickCount
SizeofResource
FindResourceA
LoadLibraryExW
Sections
.text Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 300KB - Virtual size: 299KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ