Static task
static1
Behavioral task
behavioral1
Sample
687977c296f55e1485543c25b0f54f66_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
687977c296f55e1485543c25b0f54f66_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
687977c296f55e1485543c25b0f54f66_JaffaCakes118
-
Size
108KB
-
MD5
687977c296f55e1485543c25b0f54f66
-
SHA1
8d7acb45d317c2f7cd37d8a03a36b90d9f5da52c
-
SHA256
3a147a021e0827dbdcff4019556caf5ed75c150d4b097427ec45f25bb6b82371
-
SHA512
ba986a28630fbeceb6ed1d10beead224c198e16746b8036c8996ac3373685b01ab68e18bd96d91f6f0379695fe5bfb67c52f471aba585c30b2d2618f8aa5e09f
-
SSDEEP
1536:4FdyiD5TC/8p+1p0IG4NB/rMG3gnbc146eVHqjmrrghm5baNIaBIMj34D6wTCr6:na5G/8p+o7KMG2btR4YaJj34DjCr6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 687977c296f55e1485543c25b0f54f66_JaffaCakes118
Files
-
687977c296f55e1485543c25b0f54f66_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 103KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE