Static task
static1
Behavioral task
behavioral1
Sample
59e2f5a6b4de5a91e7505f6b7be987a8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
59e2f5a6b4de5a91e7505f6b7be987a8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
59e2f5a6b4de5a91e7505f6b7be987a8_JaffaCakes118
-
Size
97KB
-
MD5
59e2f5a6b4de5a91e7505f6b7be987a8
-
SHA1
70c1d93554a9083119aa96b60ed9f60efab25c48
-
SHA256
56ece6a9676ffa20e50f0d12e3f336bf3f8ad20dee1e40587f8de77cd8a5b789
-
SHA512
46bde72deee14e993d2b7d8f6329a35505d670703a73efa74747f7dada144bb9bbcf16a1505fb1069945ecb6b8695140e39cba3a7e6bfd94f7bb645ca6aff47d
-
SSDEEP
3072:9OFDkrMuq/7K+QtaozWzzdLTaKt0ntpqgp1c:0FDkqu2dLTaHeZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59e2f5a6b4de5a91e7505f6b7be987a8_JaffaCakes118
Files
-
59e2f5a6b4de5a91e7505f6b7be987a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
119ba01abad812c4a461368344bcd6cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
RtlZeroMemory
VirtualAlloc
VirtualFree
VirtualProtect
Sections
.pepsi Size: 95KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE