Static task
static1
Behavioral task
behavioral1
Sample
68d3fe9e2a7a6f1941decadb6e428fee_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
68d3fe9e2a7a6f1941decadb6e428fee_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68d3fe9e2a7a6f1941decadb6e428fee_JaffaCakes118
-
Size
36KB
-
MD5
68d3fe9e2a7a6f1941decadb6e428fee
-
SHA1
f92c7eee848e8b23d0701c2315c38579cab81492
-
SHA256
f589f097ffd82c19e1b768e399b520ee07b9caea786c2cbd95a4a0b362be1be1
-
SHA512
c0d52879563cce0719682153686d4edb984e9140b86476deac4322ad83f134265644c35dd25c72f6c8069c6272c25824d77d0ed42fabcfc935a901b92eccaa11
-
SSDEEP
768:FVLh4pfyaLhu9XLPIif7EYeozlPKv37tQ/nuQ1:FAqIcXLQifIn+lOa/nD1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68d3fe9e2a7a6f1941decadb6e428fee_JaffaCakes118
Files
-
68d3fe9e2a7a6f1941decadb6e428fee_JaffaCakes118.exe windows:4 windows x86 arch:x86
fa65b9de32768a75c344477e8ead5e0c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
Sleep
VirtualAlloc
VirtualProtect
VirtualUnlock
GetLastError
Sections
.text Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ