Static task
static1
Behavioral task
behavioral1
Sample
690a6a04204fc2fb067c5c2929c47e67_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
690a6a04204fc2fb067c5c2929c47e67_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
690a6a04204fc2fb067c5c2929c47e67_JaffaCakes118
-
Size
22KB
-
MD5
690a6a04204fc2fb067c5c2929c47e67
-
SHA1
adf6c0d195b0554581b86e835954c20f65126ff0
-
SHA256
ddae485901820a4ae4f72fe980bff5cb58105a4f693f3b8a4730cc9b9e63f432
-
SHA512
9bb930ad0d7fd8dbcf0637a65e3896f031b12608df41f5912c40d29db6b6654af3a5f05c77fd0a61836f842270b58fa8056f2d821e2cc6aca2072d69616a2960
-
SSDEEP
384:Qhm8TDlKfEXWz9NLszMk/jnmpLeacb+pDOxpmoV/9PntB0QZPpP49:Vr8GpNLAzncLZWpmoVlPtyIPp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 690a6a04204fc2fb067c5c2929c47e67_JaffaCakes118
Files
-
690a6a04204fc2fb067c5c2929c47e67_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
:�����V� Size: 19KB - Virtual size: 228KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
19G8POW4 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ