Static task
static1
Behavioral task
behavioral1
Sample
611dfe6664d27b4c0286144605c3fb85_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
611dfe6664d27b4c0286144605c3fb85_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
611dfe6664d27b4c0286144605c3fb85_JaffaCakes118
-
Size
331KB
-
MD5
611dfe6664d27b4c0286144605c3fb85
-
SHA1
524065c869a525733ec14c195c273fdafd3c32cf
-
SHA256
d9215946dddaa8defa2175d0de0dc9ca88eff2642d86929f5e69237db7de407b
-
SHA512
b0b09b49b6371cbef132626b8fc674c326570f3e8771158b36c0177f2f064ee39e83e85a69a39d64f3c42754387dd8d81e44af6d3b791fbc5a44a39cd5f08991
-
SSDEEP
6144:0Sh4Hq4icwnLvxGUIG0EWu/CAH6SvlINgjf9oO3:TB4GjxjOEWHSvlGgj1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 611dfe6664d27b4c0286144605c3fb85_JaffaCakes118
Files
-
611dfe6664d27b4c0286144605c3fb85_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 18KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 312KB - Virtual size: 313KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE