Static task
static1
Behavioral task
behavioral1
Sample
63d4c3af3541e623a54cf40d77c5956b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
63d4c3af3541e623a54cf40d77c5956b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63d4c3af3541e623a54cf40d77c5956b_JaffaCakes118
-
Size
193KB
-
MD5
63d4c3af3541e623a54cf40d77c5956b
-
SHA1
9f5fe78bb1f4c1237983654392ba2d06f50b269c
-
SHA256
edbfbef1781f9a25f1ade297cfd124fe71768fc66e6b50f494b01e3e1f59023f
-
SHA512
ba222cd0326651ebc7ce6ad29d75907c3218df6c0bd04ce6904eade13827d5c69fd547bc9dd2bb16a72e72db7514d0d7eeac7c7b2b0374c8b720fa364c9f39c1
-
SSDEEP
3072:g/8K9LNIFpQkL/0wRPycOXyREOj/pJ6rih1t7k61NafCapx/npDtdMp:grI/Qkz0wRDOOEOzdTQTpf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63d4c3af3541e623a54cf40d77c5956b_JaffaCakes118
Files
-
63d4c3af3541e623a54cf40d77c5956b_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 188KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE