Static task
static1
Behavioral task
behavioral1
Sample
66fe1300b617a98e193a68971999ba6e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
66fe1300b617a98e193a68971999ba6e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
66fe1300b617a98e193a68971999ba6e_JaffaCakes118
-
Size
48KB
-
MD5
66fe1300b617a98e193a68971999ba6e
-
SHA1
bc671f9339ec39b5885003e65fbf142a54ad66a5
-
SHA256
347b95a84b90f0895abc5ea7da82ee448a37a6ebf51e45eb1b286c0571505113
-
SHA512
a604252532c2d1fc6d1effc1912592fa28f3f5f74118cf844a2fd3f13e0a4e08d5ff49dde8e3bca4cf3a186ba2faa552d6e270b8a32963080175cd35fcd7a0a6
-
SSDEEP
768:e7dbLPjjQkbNPaF8fj8D+rR+TMxLxU/fxIh+VTcK5aB4nGZTPSb1Q5UBLoyrjE:e7d/jj/bNPaqfj8+Z14x8HM7gqbb5os
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66fe1300b617a98e193a68971999ba6e_JaffaCakes118
Files
-
66fe1300b617a98e193a68971999ba6e_JaffaCakes118.exe windows:4 windows x86 arch:x86
d138b4428074a69c52cd454d3426b9ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
Sections
.hmimys Size: 35KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hmimys Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hmimys Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE