Static task
static1
Behavioral task
behavioral1
Sample
638fddc4abada9e815ac91e11ff86aa4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
638fddc4abada9e815ac91e11ff86aa4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
638fddc4abada9e815ac91e11ff86aa4_JaffaCakes118
-
Size
238KB
-
MD5
638fddc4abada9e815ac91e11ff86aa4
-
SHA1
4821c7fd1cd84fc0e70ef94aa17c9ec17afe4df4
-
SHA256
815f04fdf56ba000abde8a8703d48d3aae68673f0a0ab325c4bfb582f34bc12d
-
SHA512
cb67d5ee784f8f1175acd0cd11066562a794bed0138e8ec2edceeb960f16b7c58b1b5d5257042851ee17c86f7d288c2a64a8e22f015f0ababc875c9cb4501f75
-
SSDEEP
6144:OE/82EUMRCHpVuqNH85EVWCGnLxpM9DFwWiJXCYocVfThrcrBzq:JUiM6Vxty8mnLjMdiJfkBzq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 638fddc4abada9e815ac91e11ff86aa4_JaffaCakes118
Files
-
638fddc4abada9e815ac91e11ff86aa4_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 211KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE