Static task
static1
Behavioral task
behavioral1
Sample
61c39e10ce7461e6ea6c9f91287b0659_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
61c39e10ce7461e6ea6c9f91287b0659_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61c39e10ce7461e6ea6c9f91287b0659_JaffaCakes118
-
Size
287KB
-
MD5
61c39e10ce7461e6ea6c9f91287b0659
-
SHA1
8d598b39c023213b063332a76647f6440a456d1d
-
SHA256
aee6a5088c443c433ab1e3969c8af206858903db177fe28c8a93aa47ed8506b1
-
SHA512
1658fe966e9392b3f22f79fbefca7dd7abfd983e04e291068faafe37cb229e228d626725e875ebeb20b799ea5ec5b451b6996bf8cb836df83e8fa60a2122154b
-
SSDEEP
6144:ZodsViMIY0V3cU/nolsFmEwDK48c41qkJ5uwk1H5j87HLL8:ZkrYIoSFmrK4Vahk5jqc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61c39e10ce7461e6ea6c9f91287b0659_JaffaCakes118
Files
-
61c39e10ce7461e6ea6c9f91287b0659_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 9KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 277KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE