Static task
static1
Behavioral task
behavioral1
Sample
64a9c6dd10a738e97b163a3303db1dc3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
64a9c6dd10a738e97b163a3303db1dc3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64a9c6dd10a738e97b163a3303db1dc3_JaffaCakes118
-
Size
50KB
-
MD5
64a9c6dd10a738e97b163a3303db1dc3
-
SHA1
05b429d7b5ee3a714270b827451786395b553b8d
-
SHA256
24ff093bd54a25a2ba709eafbb9ec086ad977454b9acfcf5ead5389efd26a4ce
-
SHA512
ab69bdcde0a595c4886af2f1740970cf82ed9bf6650febd38854e07561eaa55977a08f98ffb914da89ecfb1f16b9d93ec22a7c49cb53a35bd19a84ba3ebe1780
-
SSDEEP
768:gV1nbLM8kS2zYMRPdt8c5M9S77EHtGyZXF79rPxsbGRWJ8P0Qdl:gV1nXMwCYsdtv5QSfENGyj79sGu8Phd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64a9c6dd10a738e97b163a3303db1dc3_JaffaCakes118
Files
-
64a9c6dd10a738e97b163a3303db1dc3_JaffaCakes118.exe windows:4 windows x86 arch:x86
a080576c3ed14aa9f17960545b7614e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
_CIcos
Sections
.text Size: 22KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE