Static task
static1
Behavioral task
behavioral1
Sample
65e68f12de702c2ae763dd46678fae91_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
65e68f12de702c2ae763dd46678fae91_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65e68f12de702c2ae763dd46678fae91_JaffaCakes118
-
Size
54KB
-
MD5
65e68f12de702c2ae763dd46678fae91
-
SHA1
ea0812facd7a35e6116ab1e1ffa43c57633241df
-
SHA256
11202d64f571138bc66305cfa1382af261f569cd7693d9ac991ea4c166f631b3
-
SHA512
ac7bc178e1ee4337f53ae2ebe0e99eae2438aa2aece5c903f97a642642233be37dff817a201309b531eef827c55e6d773db0670acf59ba2c77993e8a9fa137df
-
SSDEEP
768:YsxcG5H3K6haeCufsdNwWwEgF0nD1rasia+SzVbjyenAsliCUIdyAFoDhM4oxStD:Fh3rIeJf/VzC1Aa+gbeeAYi1uhoDSBx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65e68f12de702c2ae763dd46678fae91_JaffaCakes118
Files
-
65e68f12de702c2ae763dd46678fae91_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 34KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE