Static task
static1
Behavioral task
behavioral1
Sample
6003121623e8a1009b5666a4262fc5bc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6003121623e8a1009b5666a4262fc5bc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6003121623e8a1009b5666a4262fc5bc_JaffaCakes118
-
Size
80KB
-
MD5
6003121623e8a1009b5666a4262fc5bc
-
SHA1
e20585bbd2ffcd0bb27a86d7b18fac750a9bb978
-
SHA256
72d6c05946e079f1a85dd7de842f4f0b0d5f018e88da79646cc0dc08c058bd0c
-
SHA512
e0599fe27c30efdbd773a8d2edbfc590b8ebbfe374652d3c0f04056a293c4e3f71d63eb0a2e0de32ddb5da12a6e70adf596252a605f122b585a0dee15c039efb
-
SSDEEP
1536:Q7bJlSs5RwBOS5N/X04OKPkcKldtQ985VSQaJyfmHCJisoujUd:CbJgU0BX04kcsXzffmHYisR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6003121623e8a1009b5666a4262fc5bc_JaffaCakes118
Files
-
6003121623e8a1009b5666a4262fc5bc_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 39KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE