Static task
static1
Behavioral task
behavioral1
Sample
60eaab4a7fa31971c99f408dab349e97_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
60eaab4a7fa31971c99f408dab349e97_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
60eaab4a7fa31971c99f408dab349e97_JaffaCakes118
-
Size
110KB
-
MD5
60eaab4a7fa31971c99f408dab349e97
-
SHA1
a473492a15ad38c19d2b288184c278e29c1528e0
-
SHA256
1208c497f396a5f103ec8c00b742edb71c804cfa824403583d8b4566a6bc6b3e
-
SHA512
64a2f3fcd0e0f4be1d0457eb075a4d3f180dddef4b8e612e748a1edb2f501304321231de2f16ce14dd78732738ef6396fae516b207163f3f5deccbc7c6c0179c
-
SSDEEP
1536:r1EVxnmDIe4yP2kHCdZFFp6kJEwywMvBXhsZ8V6Qk6425zEFDERKP3xlMaglm:evWIexMFFp6GJBMvBXhsZNQkCZQwsA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60eaab4a7fa31971c99f408dab349e97_JaffaCakes118
Files
-
60eaab4a7fa31971c99f408dab349e97_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 105KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE