Static task
static1
Behavioral task
behavioral1
Sample
69c5e95451cbba95e15e62f4f2cb7c6e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
69c5e95451cbba95e15e62f4f2cb7c6e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
69c5e95451cbba95e15e62f4f2cb7c6e_JaffaCakes118
-
Size
20KB
-
MD5
69c5e95451cbba95e15e62f4f2cb7c6e
-
SHA1
62a89525c1d9552a07e01f1758ec5c74a7c050ec
-
SHA256
3758854c9798b201cb401f83fe0d0148d32d7a4a1a23867b02df4ca396c72d61
-
SHA512
c90fb1370f5dc7331186143cc663da4b0d255a6981ef3f0df95c5e7ea03b35e2d58fc48baed53127b9d98e14eaf50d7c16e3c232b0982543e82e3fec48697ef1
-
SSDEEP
384:QF1JXr+7TNK9OFdg/6AxFuhegi9QA5xu5KRxQQYkD8pa0tOVxb:stH8XqFuhegeQA5xu5exQQygqOv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69c5e95451cbba95e15e62f4f2cb7c6e_JaffaCakes118
Files
-
69c5e95451cbba95e15e62f4f2cb7c6e_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 15KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE