Static task
static1
Behavioral task
behavioral1
Sample
73e5fccf15d2ed894e98a876a323c8f5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
73e5fccf15d2ed894e98a876a323c8f5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
73e5fccf15d2ed894e98a876a323c8f5_JaffaCakes118
-
Size
94KB
-
MD5
73e5fccf15d2ed894e98a876a323c8f5
-
SHA1
4f61c5aacc2e2ef6bb85a7db6075510c89b793d8
-
SHA256
45da40af491987a2de4f0d6ba8297a71b2a8542222c47e1d40c77d995fbe5327
-
SHA512
b668f763c2dfc0f4e3b3977ebaf61e390ff45bae9de9b054d738fbe87c775485ac20973647da960f8fc22a182e65338c42ee80cdc285fa9843c167d70b8c66c9
-
SSDEEP
1536:oKqhNy4FIJREFhMusklR2KhINS3p5vxtVh6DgL8cG8qBDKdiI4wNazOXGQUGPv30:odhsUIJRghM9Kht5VPRLPxgzOf5/o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73e5fccf15d2ed894e98a876a323c8f5_JaffaCakes118
Files
-
73e5fccf15d2ed894e98a876a323c8f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 88KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE