Static task
static1
Behavioral task
behavioral1
Sample
70b1535cc613e52f0a466a921dde4dd2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
70b1535cc613e52f0a466a921dde4dd2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
70b1535cc613e52f0a466a921dde4dd2_JaffaCakes118
-
Size
5KB
-
MD5
70b1535cc613e52f0a466a921dde4dd2
-
SHA1
9e4341a881b68fc1db4570f03d5c91186c2504d1
-
SHA256
1c49ed0ec5f658e7b6e418350edf3e1406e7ed7a720fdb1f3ee2d78c2f530575
-
SHA512
39d69824c09ce9980e2b1c51c6eb3aaebff74789864eec30abca672bdcacbff7604e2c98eb8fc7b5223cde762c178d17c9a6d66ddbd0581b0c0736c6cfeec0f2
-
SSDEEP
96:b5cE+YjeEAGPPXJ5cL3hRhimGPAv5+S5fxscROY:b9zGGP/shRhh8AvMCf/R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70b1535cc613e52f0a466a921dde4dd2_JaffaCakes118
Files
-
70b1535cc613e52f0a466a921dde4dd2_JaffaCakes118.exe windows:4 windows x86 arch:x86
b8111320f794d9e62a7ffe5d84bed59a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualFree
VirtualAlloc
Sections
hmimys Size: - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmimys Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmimys Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE