Static task
static1
Behavioral task
behavioral1
Sample
63a803ee508a9196e4c8941d414ebb11_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63a803ee508a9196e4c8941d414ebb11_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63a803ee508a9196e4c8941d414ebb11_JaffaCakes118
-
Size
149KB
-
MD5
63a803ee508a9196e4c8941d414ebb11
-
SHA1
ca6f9b294df65e186508d28e4cecf7c29082664b
-
SHA256
b9297a33d746f5ca962e41256bfcff21c0c8d98e3dbba142e7eef3d7ab38a4a2
-
SHA512
31b34569d9733ab1ae02f8efbbb3dabe3a945db96b7736395656682a8f4137d587c43871dd200b1f7ea189ed892914fe7698f4b839cf1eee0abe8a7e6918f460
-
SSDEEP
3072:+gX/uR/iTZN2mNyBXGTJcjS607d+ah6Hheova6Xn1F/UB3kL/OsHa:+gX5ZNBcsr60Z/h6HFv5n1hUdkrOs6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63a803ee508a9196e4c8941d414ebb11_JaffaCakes118
Files
-
63a803ee508a9196e4c8941d414ebb11_JaffaCakes118.exe windows:4 windows x86 arch:x86
148bf55ceb3e5471ef5f9ffc2bb75e2f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect
Sections
.XComp0 Size: 138KB - Virtual size: 400KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.XComp Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE