Static task
static1
Behavioral task
behavioral1
Sample
599f1ee61dc586d33aff7b1ad4c48e55_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
599f1ee61dc586d33aff7b1ad4c48e55_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
599f1ee61dc586d33aff7b1ad4c48e55_JaffaCakes118
-
Size
12KB
-
MD5
599f1ee61dc586d33aff7b1ad4c48e55
-
SHA1
b7974d5a3031029d80e57bf77f80c6ac05859c17
-
SHA256
13c1d055e925b456b8dad92a19e50a20b974adcb3dbb86a6a013da1adde951aa
-
SHA512
7175ae423cd386b01403a90fe8adc9d30c62e59666aa9822278c0da52680568f7263f11828f19653fbe3aa151421812f09ea94b48749f17138b827f9deaabdbe
-
SSDEEP
192:tiSqM+tWqoe4DU73TGyVl428zwSQ1CN42d3WLva7P9tbAIH:trn+tWS4DU73TGCf8zwy62dGr4DZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 599f1ee61dc586d33aff7b1ad4c48e55_JaffaCakes118
Files
-
599f1ee61dc586d33aff7b1ad4c48e55_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE