Static task
static1
Behavioral task
behavioral1
Sample
62c8f354a3a413ad191dc50ef264786e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62c8f354a3a413ad191dc50ef264786e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62c8f354a3a413ad191dc50ef264786e_JaffaCakes118
-
Size
16KB
-
MD5
62c8f354a3a413ad191dc50ef264786e
-
SHA1
2dc003bb54ddbe6416dd834369928d3f0ed3b68f
-
SHA256
90100dc025f8d2b1ab79f0c422b91c5e3f2afa903700910d2386011088a52740
-
SHA512
c01d4ef7112d69f68355f526c96dcea55efde5f2e28dbbd559d3534cb30dc7cce14c9e4e8b2d36af99f300ed2c66681988a509ad90ddf530b9608e94e9ff7deb
-
SSDEEP
384:Y5OGKOPWdyImuwxT3Nh/lZOTjtZAyyQQA:EQdnfWv23tvyQb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62c8f354a3a413ad191dc50ef264786e_JaffaCakes118
Files
-
62c8f354a3a413ad191dc50ef264786e_JaffaCakes118.exe windows:4 windows x86 arch:x86
24734dd2e70099b3dbbd6bd67280238f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
wsprintfA
ole32
OleInitialize
oleaut32
LoadTypeLi
Sections
.PACKMAN Size: - Virtual size: 188KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PACKMAN Size: 79KB - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE