Static task
static1
Behavioral task
behavioral1
Sample
675893111f243b965cbf829005f0612c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
675893111f243b965cbf829005f0612c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
675893111f243b965cbf829005f0612c_JaffaCakes118
-
Size
47KB
-
MD5
675893111f243b965cbf829005f0612c
-
SHA1
bb0f943d4373b30297f02ba3f6c4746faf25a731
-
SHA256
5d36244f243c33c7f0700231d92558d7ea84975310fb34900b7265560ee99e99
-
SHA512
60ee509f19d417209504936521f0494560d331b1f1c9499cb58fdaf6158786604d10135d1a7e97bcc93078aacf03a291fc3d58f982d3b8f60fec756e22393cf0
-
SSDEEP
768:8PZ7qtPegxpQozpzpn7UM4epXNeyvrvlTaXRubLrlFLy/CoNh/BRijM1/f/nKXlB:DBtQOzJUMRNXvxTaXEpI/7hz/3n6B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 675893111f243b965cbf829005f0612c_JaffaCakes118
Files
-
675893111f243b965cbf829005f0612c_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 33KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE