Static task
static1
Behavioral task
behavioral1
Sample
61e61987a5bbdc8a0017696921fe705f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
61e61987a5bbdc8a0017696921fe705f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61e61987a5bbdc8a0017696921fe705f_JaffaCakes118
-
Size
25KB
-
MD5
61e61987a5bbdc8a0017696921fe705f
-
SHA1
6ff7a4d5c55845644a40cb991c014ca2aef80d09
-
SHA256
94504d6df129571ef2facced4fb153299baeea3e30f4514aae80734d6dfc7b2a
-
SHA512
f87e55102c38e7b7f8250ffa64a10dc8e931c9f182baa90ec6c76c9eecf6089dde11bc6627d52b43529dc644d371429c72ffdaf4b50798ea6d3e17a0daa2934f
-
SSDEEP
384:n0/u2P6+S4ogI82G+FMecxFBDSnHEkONeMrmVgpyTWZYAC6Mcqtq4Kx9x:n0GL4ogENF0FB+nkk6nJXXEU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61e61987a5bbdc8a0017696921fe705f_JaffaCakes118
Files
-
61e61987a5bbdc8a0017696921fe705f_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 21KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE