Static task
static1
Behavioral task
behavioral1
Sample
62d25b70eff3008729c29f05b2bb84f7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62d25b70eff3008729c29f05b2bb84f7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62d25b70eff3008729c29f05b2bb84f7_JaffaCakes118
-
Size
877KB
-
MD5
62d25b70eff3008729c29f05b2bb84f7
-
SHA1
a75441a7d63b1c19b10c6d8eb9ddd66e65d20fa2
-
SHA256
bfaef1698ac0de1105363b69b6a0db3293eb76326d3e8a8e86a743148d2059b9
-
SHA512
93fbce4ef4f6e13c46cbd3249bd91a80c42f6245270f82551688f290692385a6e16ee7e40a38db954683d550ac72423bac2aaa340f22830fa91ac15bb9b174b6
-
SSDEEP
24576:CpnKlcBRAQycJ9nPx/igxp+2BxbaDWm65klK:cnKlczrrnP870aDWmq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62d25b70eff3008729c29f05b2bb84f7_JaffaCakes118
Files
-
62d25b70eff3008729c29f05b2bb84f7_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE