Static task
static1
Behavioral task
behavioral1
Sample
627729bb6ca37afa7e7e648ae43b2c20_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
627729bb6ca37afa7e7e648ae43b2c20_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
627729bb6ca37afa7e7e648ae43b2c20_JaffaCakes118
-
Size
103KB
-
MD5
627729bb6ca37afa7e7e648ae43b2c20
-
SHA1
bfbf4872b4281ec6aed3ebe8f30e663df8c28c5e
-
SHA256
9ba5a0bfadfdc34ac7b7f5b273f7943eda9a46b5ec09f83d411c27adc65835aa
-
SHA512
2971e5293446cd65fbe5b7b38bbb7e7777f2721612684d78be09ecac7d5e456136405e10f830ed51d41a9947fb8789a26da97fd4fe33570224cb474f1ae87358
-
SSDEEP
768:fGihsuKtGZmeS+1B1H9oX6JHalAbyDFTbVQGSDMf1zBmQzTGfmgyqFLviG+i:frsuZmh+voqdnbCf1zwQVgvFL5+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 627729bb6ca37afa7e7e648ae43b2c20_JaffaCakes118
Files
-
627729bb6ca37afa7e7e648ae43b2c20_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE