Static task
static1
Behavioral task
behavioral1
Sample
740f98d84e90c6c0eab69f736aaee2f0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
740f98d84e90c6c0eab69f736aaee2f0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
740f98d84e90c6c0eab69f736aaee2f0_JaffaCakes118
-
Size
134KB
-
MD5
740f98d84e90c6c0eab69f736aaee2f0
-
SHA1
4802e958b2d0ac70187aa89d020717affe33ca93
-
SHA256
0064715bf2f01c6708f92f8a7ef479e8b5d43e8bcd7b63482ab7214ed7d7fcaf
-
SHA512
1b10aa29bc0f567b4fa7763c2794f66637b742ecb8fcbdde714887fd30c51ff0507a28d955c96d0b3bd99762e56a784cd22e0c1877c8230faea38919fa1f1b9c
-
SSDEEP
1536:IUFQfEcm/El8Vq1wLf/fyud+Lizf1zwQVgvmTId:Ikp8aqMnfymIib1zwLvm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 740f98d84e90c6c0eab69f736aaee2f0_JaffaCakes118
Files
-
740f98d84e90c6c0eab69f736aaee2f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE