Static task
static1
Behavioral task
behavioral1
Sample
70e700dabd67122a8e110b61725f7e92_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
70e700dabd67122a8e110b61725f7e92_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
70e700dabd67122a8e110b61725f7e92_JaffaCakes118
-
Size
606KB
-
MD5
70e700dabd67122a8e110b61725f7e92
-
SHA1
c62d8c49867e80f20f34ca6dd2517a17f5b2f762
-
SHA256
de1694ab95ebf95a4381dafd2cdad5eac50e75711f03f0fe2fb15e906acc8d9a
-
SHA512
94da56dad696f007d3be5b57752f3f0bab3979f84cad0e0ff3909e0fb0e8f1a47804c98788c24205704a8674335496c9f1cb687f7b7e0c2fe4271f14e750139b
-
SSDEEP
3072:Q48BnsXps+WZFgPUFwUCGcFpLl7W4t65p7MlUZCx329999s:Q4SE06UFwXLLl7DEPq3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70e700dabd67122a8e110b61725f7e92_JaffaCakes118
Files
-
70e700dabd67122a8e110b61725f7e92_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 112KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE