Static task
static1
Behavioral task
behavioral1
Sample
70f9f1662d6e6f606be42e1eb3e967ea_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
70f9f1662d6e6f606be42e1eb3e967ea_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
70f9f1662d6e6f606be42e1eb3e967ea_JaffaCakes118
-
Size
44KB
-
MD5
70f9f1662d6e6f606be42e1eb3e967ea
-
SHA1
9afd13440757732c99c3d0ecfec59c11ae4aae53
-
SHA256
a72891ad84b8ebeaa4ae17bb5d84602c24104b9db634d97aa777a2bdc661f642
-
SHA512
1f6efbd421bc49203e194e3b4a6aac7b21a3307ccd65f35ed3fc3fc554d7c063d26e9152210755e94536bfd4da84c7a56dbc3d6758045dcc2fb7bf797b83de08
-
SSDEEP
768:wc+ceWdva7R8FWUNa/pja6dTj3nCkuOVyXxauh7G0BhdQ6wukN53Gl:wseMa7aFWka/pja6dTrPuz0uh75M7r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70f9f1662d6e6f606be42e1eb3e967ea_JaffaCakes118
Files
-
70f9f1662d6e6f606be42e1eb3e967ea_JaffaCakes118.exe windows:4 windows x86 arch:x86
496cbddf8ea5062c562b63eb0fdae48c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
VirtualFree
GetModuleFileNameW
GetProcAddress
GetModuleHandleA
VirtualAlloc
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ