Static task
static1
Behavioral task
behavioral1
Sample
761e16171c5265549fc514d1c231c402_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
761e16171c5265549fc514d1c231c402_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
761e16171c5265549fc514d1c231c402_JaffaCakes118
-
Size
20KB
-
MD5
761e16171c5265549fc514d1c231c402
-
SHA1
6970396d91e2883e27ab7d1a987d0d83477dd625
-
SHA256
880e966f00f756083406bc574cfcc22e81e1bd3448918313aa53e5a9da6128b8
-
SHA512
9cf57b86fddd93b4156c1bfa1b9aa517b87653f53e9b67b68b494df6dcabf5a77132cfdfa87522d8c470124023bbd3a02132c13c2dfdb537006f8755116e2b17
-
SSDEEP
192:uUJtcn/GqHlM1E+eDFA1OrQYZNVWMV19m7cJKIg4demxO480LPiM9h1tytOLn:tnctHKKDzrdjpVLCSg4bOoPiM9xy2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 761e16171c5265549fc514d1c231c402_JaffaCakes118
Files
-
761e16171c5265549fc514d1c231c402_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 11KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE