Static task
static1
Behavioral task
behavioral1
Sample
63bd5968c3ed3aa13cf00186478e4f7b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
63bd5968c3ed3aa13cf00186478e4f7b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63bd5968c3ed3aa13cf00186478e4f7b_JaffaCakes118
-
Size
1.2MB
-
MD5
63bd5968c3ed3aa13cf00186478e4f7b
-
SHA1
c080ba571dd30d97be7b6b589378207af6d69092
-
SHA256
318371ea18fce4c92a5b005bab44d26d933801371e845498cacc9cf53e56a696
-
SHA512
aba47733e670ed3316c7ba689dc913bfe2c0152daf71c076093c1b0271e36c6061ae957fb5ead6f0a6bdcb51ee937feaff679a519b550c4192664f7f3081340a
-
SSDEEP
768:YpXTnMD4owDzVMAW1WXaQ+0qCPi5Et6GIf1zBmQzTGfmgyq/FU:0XTSHQ+AWwXpPhttIf1zwQVgv/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63bd5968c3ed3aa13cf00186478e4f7b_JaffaCakes118
Files
-
63bd5968c3ed3aa13cf00186478e4f7b_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE