Static task
static1
Behavioral task
behavioral1
Sample
699fa3ad3db40b341b7e1286df50c28d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
699fa3ad3db40b341b7e1286df50c28d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
699fa3ad3db40b341b7e1286df50c28d_JaffaCakes118
-
Size
462KB
-
MD5
699fa3ad3db40b341b7e1286df50c28d
-
SHA1
d9f3c1af9d6c21511796aa6e94c571367fa56c15
-
SHA256
c187bb889439fe11bccfe8adfc9a86e82a48c36ab02d9bb8e7c996be353d9718
-
SHA512
58d70af34649acea4e2fab2099740ea047f61a6d9ad0824684309b9df65cff75574b8c35a4585f85aa4a09df8adc9ea72c5615477d97ecf5c955523bdb4c7013
-
SSDEEP
12288:slSoPCDyh9us6W5b7Ns9xfm0Km/BERAlk1U+5j7UwNU:n6L9P6Wl7en8m/Bllk1Uwj7UwNU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 699fa3ad3db40b341b7e1286df50c28d_JaffaCakes118
Files
-
699fa3ad3db40b341b7e1286df50c28d_JaffaCakes118.exe windows:4 windows x86 arch:x86
f0aed4f566840a701ae1beb9657c41d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
DefWindowProcA
Sections
heat.ray Size: - Virtual size: 1.2MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
heat.ray Size: 458KB - Virtual size: 460KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE