Static task
static1
Behavioral task
behavioral1
Sample
6229098b2812909eed88a3c1f426d99a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6229098b2812909eed88a3c1f426d99a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6229098b2812909eed88a3c1f426d99a_JaffaCakes118
-
Size
197KB
-
MD5
6229098b2812909eed88a3c1f426d99a
-
SHA1
d406fef8187bc097abe75c2631b518d04c0e0d9c
-
SHA256
bebf742e76ee22911307b7b62ee878e64729a02cc2c153713f99d93e38220b0f
-
SHA512
239f401175d7840b166f55b525f327b1a3be25877c38722aea29d98e72f0430695971336a568455b5a1fb9d99b070ef0596d0fe1e19e5b2345bd68beb9fb3565
-
SSDEEP
3072:6WtlQOGYAwawSQxDXTRk09L67N0PwTXvWr2qbzPZYP7mHbMDMN0ED7n/NWkWQwsI:fOOnT9SwGwiTvdGUk5qEPjWRsI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6229098b2812909eed88a3c1f426d99a_JaffaCakes118
Files
-
6229098b2812909eed88a3c1f426d99a_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 186KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE