Static task
static1
Behavioral task
behavioral1
Sample
621db1f932a5efd56fa0cc3411988522_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
621db1f932a5efd56fa0cc3411988522_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
621db1f932a5efd56fa0cc3411988522_JaffaCakes118
-
Size
1.5MB
-
MD5
621db1f932a5efd56fa0cc3411988522
-
SHA1
17c4a87d2e6504d689cfb3119040bd7678264271
-
SHA256
d761ee193f0e35a2bafcfefbdcf38529887e38b49e14d5a315ab51838d11d50e
-
SHA512
32e330338c7271563d6bfbb7bac7a902a29b403e30ce4e026c6e16b7344de743e68a8e9fcb5ef127ca4559c3260700a377dd7f3d93e8efb488bca97a1af693dd
-
SSDEEP
24576:oAYNUL8JFB+W+xJgRBAZYKUt9bT9/CeAumNdbj1Y0sCIkS6u/sKOfkzHL:olNPJFZ5ROeX9PzmNtZvsfko0xsL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 621db1f932a5efd56fa0cc3411988522_JaffaCakes118
Files
-
621db1f932a5efd56fa0cc3411988522_JaffaCakes118.exe windows:4 windows x86 arch:x86
94c7366d739e7bf962bb011f2c5fab76
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
GlobalAlloc
ExitProcess
Sections
pcs1 Size: 544KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pcs2 Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pcs3 Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pcs4 Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pcs5 Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pcs6 Size: - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pcs7 Size: 1006KB - Virtual size: 13.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE