Static task
static1
Behavioral task
behavioral1
Sample
65dbd79664d70d6507891b125347f052_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
65dbd79664d70d6507891b125347f052_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65dbd79664d70d6507891b125347f052_JaffaCakes118
-
Size
25KB
-
MD5
65dbd79664d70d6507891b125347f052
-
SHA1
ff03cfa68ed2647feefd423405a77a6ff904f19e
-
SHA256
1c08662dbe1f4bb087af9fd3740d1b24eed25ed2d717befc6fcc53a77786ef6b
-
SHA512
e95ca9230a1e75f1e238ad785b37527f0ea3cad36d5c123f28d936cf1988fb6e78e60043705d3d37cc703e0ed273f79015a76fdbb5058ebaf07974d3332018ee
-
SSDEEP
384:nbJniihOBUBRCOjQkOpXuuGuijc1Qt4xkSo4JJ/vy6K+D2E4oN/3bo5q4ah7U+:n91BdOpXuNFA1O4xf93yG2I13YK/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65dbd79664d70d6507891b125347f052_JaffaCakes118
Files
-
65dbd79664d70d6507891b125347f052_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 21KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE