Static task
static1
Behavioral task
behavioral1
Sample
74a17f56a8da82c32e4e3269a251e86a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
74a17f56a8da82c32e4e3269a251e86a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
74a17f56a8da82c32e4e3269a251e86a_JaffaCakes118
-
Size
25KB
-
MD5
74a17f56a8da82c32e4e3269a251e86a
-
SHA1
c2657c9ebd527f9cc666199556a32fb2a1faed1f
-
SHA256
6f9b06a7d25721a2a6fb0e428bb2017853a1ec2e6e3d4398ee8ed915eee9e2db
-
SHA512
f8a7ed68d51f04b7f1809319f76adc2ac448973c50bb19c68d3945bbef3d0722dd807e84738f7b3b9fa25383740c2324995936020c9dbdedef05589a955c3625
-
SSDEEP
384:nCKRqbnVqnDPxXyYhAA38gd3Tjm1jSyrlbg+3doP3GSFrE2NLQiVKKnRUWKq4m+z:nZaIxyY2gdDyfrf3dSrE2FwKe1ZPF02
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74a17f56a8da82c32e4e3269a251e86a_JaffaCakes118
Files
-
74a17f56a8da82c32e4e3269a251e86a_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 21KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE