Static task
static1
Behavioral task
behavioral1
Sample
67e28ba630a6a452b37e028be7a86481_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
67e28ba630a6a452b37e028be7a86481_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
67e28ba630a6a452b37e028be7a86481_JaffaCakes118
-
Size
252KB
-
MD5
67e28ba630a6a452b37e028be7a86481
-
SHA1
18e99e6851194b8c191baca137d404bf2e5610d1
-
SHA256
6afbe7fb063435c78adc7058d49eafbfc3cf2a519eb48da45ca5425eedcf33fb
-
SHA512
e17a4818b5a5e8677b66bb301b3131dcb19f5e02210754ed422ba9e88d33ca9f03bae6d89e3cee5e053ee2dad1af2906c72b488dedd9ab85d844bd6e7f576d67
-
SSDEEP
6144:zQ2+gFEMC6FS3ew4JOjl9yuwA+J35qDPJa:z3+kC6Fq4c9vx+J32
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67e28ba630a6a452b37e028be7a86481_JaffaCakes118
Files
-
67e28ba630a6a452b37e028be7a86481_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 198KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE