Static task
static1
Behavioral task
behavioral1
Sample
72c1480789da292784501a6de3d93d20_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
72c1480789da292784501a6de3d93d20_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
72c1480789da292784501a6de3d93d20_JaffaCakes118
-
Size
121KB
-
MD5
72c1480789da292784501a6de3d93d20
-
SHA1
57df35ba51b4951a603fab10326d62d90236016a
-
SHA256
40c99da554520c333b953ab5fbf8e0b3fb31119c80fc3f46236c9d4b1dade8d1
-
SHA512
4922658634bb6f3bc916b12271b817340d7dd511113608a5397d699ad2156962e69d872452fa853f0d8d055b6647dbd6fc8b10c64e90ad88ffc79c8d509971a8
-
SSDEEP
1536:IpL7ckM1Z3n65x263Ui9n06JXAlcE/6on2/KNVD2NL0glZuAXnVs29gCvpBKtvn1:Ipvcl3xknhX4d/DaKCN3Za8MBrOVoD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72c1480789da292784501a6de3d93d20_JaffaCakes118
Files
-
72c1480789da292784501a6de3d93d20_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 67KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE