Static task
static1
Behavioral task
behavioral1
Sample
64a6beb9acf9504efe80438d641faec3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
64a6beb9acf9504efe80438d641faec3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64a6beb9acf9504efe80438d641faec3_JaffaCakes118
-
Size
139KB
-
MD5
64a6beb9acf9504efe80438d641faec3
-
SHA1
7f82d669536301c72fceafafb70eb8b7b420f625
-
SHA256
39ab06d7e3500d9f253612555083f17c11b4d1d46c147855bdc02b23325a51a7
-
SHA512
71c12663bc50ee27dcb8f0071cb153884709c6a02adb0fd4c311cb7e49749f96735c490f56773d42a63655b3b13d9f94fc525631bc404e13b311832103119533
-
SSDEEP
3072:q+pxY6Z1lCQ26ktBBKFH57bE/60NRVpX9lFsy/gEJiK+6A41kmNe+p:NxdopXDsALZpXl7IEJiK/ro
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64a6beb9acf9504efe80438d641faec3_JaffaCakes118
Files
-
64a6beb9acf9504efe80438d641faec3_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 134KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE