Static task
static1
Behavioral task
behavioral1
Sample
74768d8e88d091a1c6ca739dff8dae72_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
74768d8e88d091a1c6ca739dff8dae72_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
74768d8e88d091a1c6ca739dff8dae72_JaffaCakes118
-
Size
7KB
-
MD5
74768d8e88d091a1c6ca739dff8dae72
-
SHA1
2423e06b40eecda73221d366d64f0c23bd950664
-
SHA256
cbe789698de0f3e6b71efec4d7c09f0b09e9a4cfdbac6da339013be4a01804da
-
SHA512
07088362b6bc18102ab389c8d29f8dda4dc721f02724454281b6f560b59b9920c3af7eb3ac3791ad128a3157acca0f38262b74b73496dabdeccae2ce6c9ab20a
-
SSDEEP
192:J77weSefIM1jLr3pPrL7g7Sgmwife6h1:NcekM1f3pP302vi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74768d8e88d091a1c6ca739dff8dae72_JaffaCakes118
Files
-
74768d8e88d091a1c6ca739dff8dae72_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE