Static task
static1
Behavioral task
behavioral1
Sample
649a24384357cd64b694ea485e6ddde4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
649a24384357cd64b694ea485e6ddde4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
649a24384357cd64b694ea485e6ddde4_JaffaCakes118
-
Size
31KB
-
MD5
649a24384357cd64b694ea485e6ddde4
-
SHA1
fab562bbf248ebe2f0537c6bb513e99d34387388
-
SHA256
37ac6cec833c9e56f8556a3576fb3c257b659b03f4fb97d6a958e10e1d3205f1
-
SHA512
a9140ca148d2590a1e8369fb4ff8c36280c0f06725534dea3324bf324f76e9a4b0319f1a8e092edd6302dafe75b8404d2411c9003e412403a04e855ed528b4ce
-
SSDEEP
768:nya5Qd7Tmv02gSEbrksG+70CxRwgdLird/:nl+7TmvhUb5G+fFtQd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 649a24384357cd64b694ea485e6ddde4_JaffaCakes118
Files
-
649a24384357cd64b694ea485e6ddde4_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 21KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE