Static task
static1
Behavioral task
behavioral1
Sample
658074f0770a6be10048e0c00d4a56af_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
658074f0770a6be10048e0c00d4a56af_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
658074f0770a6be10048e0c00d4a56af_JaffaCakes118
-
Size
44KB
-
MD5
658074f0770a6be10048e0c00d4a56af
-
SHA1
019f6890fe89eb79d117a827ea08e5e69d0e8dac
-
SHA256
52ee340152fd8b2aed4497ce08434c437d8b1fb455751897f192577f35545353
-
SHA512
373d4155a1e0e3e6b14e45104a456546d5aefba63fbaa2d4a16a258831983db18ed1b7ceac3543911391a00a276f3abd5f22b304086085d7860e2f2ffebe0c7b
-
SSDEEP
768:wl+RxOpPNN0nhpOA3JfHYBjgPI9di6N4xmhQhIUV5VekqgerEZH4sSnKeGzE:wl/NOx4BOCHBmeUVBerEZ/S/UE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 658074f0770a6be10048e0c00d4a56af_JaffaCakes118
Files
-
658074f0770a6be10048e0c00d4a56af_JaffaCakes118.exe windows:4 windows x86 arch:x86
27d384f5734da7ab1a4990bdc7ac0c40
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetTickCount
GetSystemInfo
GetProcAddress
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 736B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ