Static task
static1
Behavioral task
behavioral1
Sample
608ddc28a62db173e6c991254ce41a3a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
608ddc28a62db173e6c991254ce41a3a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
608ddc28a62db173e6c991254ce41a3a_JaffaCakes118
-
Size
336KB
-
MD5
608ddc28a62db173e6c991254ce41a3a
-
SHA1
9ebe5f9421b3f02c4be1875a5315783519d1195b
-
SHA256
837dfe9a26acb4fc6453c3d14b79264fc7c8e6bc352b137de2af1b5c72ff3e97
-
SHA512
6b39c35417dc16859c3ed30dcaaf9e685138018225529c042995bf2080cc6c2fae813b456d7003737c16dd6f1a42b9209cf9db8d4d9ddf7ba546bbf13d8f374f
-
SSDEEP
6144:uaI1aO1Uxrvh0y/KyEIu+jaeoLZtPZeYuxG3YM13XnVZVb9bOpvcBxrs5U:RI0O10rv1KyE1+anPZcxG3Ye3XVnIKB2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 608ddc28a62db173e6c991254ce41a3a_JaffaCakes118
Files
-
608ddc28a62db173e6c991254ce41a3a_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 325KB - Virtual size: 420KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE