Static task
static1
Behavioral task
behavioral1
Sample
65aabcdd3be3942afa4b5822882c8363_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
65aabcdd3be3942afa4b5822882c8363_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65aabcdd3be3942afa4b5822882c8363_JaffaCakes118
-
Size
20KB
-
MD5
65aabcdd3be3942afa4b5822882c8363
-
SHA1
4228ed9d5b28ca2d0ffb9fc11d1e2dfd13e46cb5
-
SHA256
9b4108eaf25fa167e374a715a05786bcf540bd7f439236a50a8039c3c5db876d
-
SHA512
1884dac0b5e16b61dad202a9407627c4a74acb6cdf2cb13c100562717fd07382b6954b3c7f19cea653e113b8eecd5dff60c963e505f65066c078bb7955095f75
-
SSDEEP
384:A9wwBFyMf4Rk2jibpIBoVeEZZOU5BDGt/EXrvtKCQZbxcyhMm90M3CHt:A9TmHeVMoVeaZTTuixKCQZyitpCN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65aabcdd3be3942afa4b5822882c8363_JaffaCakes118
Files
-
65aabcdd3be3942afa4b5822882c8363_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 12KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE