Static task
static1
Behavioral task
behavioral1
Sample
70c46ba17a4d81ff6ef9bb5b1386d352_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
70c46ba17a4d81ff6ef9bb5b1386d352_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
70c46ba17a4d81ff6ef9bb5b1386d352_JaffaCakes118
-
Size
93KB
-
MD5
70c46ba17a4d81ff6ef9bb5b1386d352
-
SHA1
f47d2ffe77ba550e554ded698c541222b088041d
-
SHA256
5a49a55189c8943cf01292f7610af886a33c0fc6c96ec4b675997d7ba529ea28
-
SHA512
608cbc18dcdd5ce33218dbbf61f27486d4a0699aa13ac373db2e6c099061dde2fb80eb0e5dd2ae47382ef9d2c0617cda4fa2974e2866992da052b52d290013f6
-
SSDEEP
1536:QKlLDrdI0LvmvMFtSwfybI0f+q548EhhnY3Fw3CuY+D0htq3k6R5sjQ:QcDS+OIWaqb2nYVwjDWtmTYjQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70c46ba17a4d81ff6ef9bb5b1386d352_JaffaCakes118
Files
-
70c46ba17a4d81ff6ef9bb5b1386d352_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 88KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE