Static task
static1
Behavioral task
behavioral1
Sample
74deab8118d8196b872ec99d0468a2ab_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
74deab8118d8196b872ec99d0468a2ab_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
74deab8118d8196b872ec99d0468a2ab_JaffaCakes118
-
Size
281KB
-
MD5
74deab8118d8196b872ec99d0468a2ab
-
SHA1
9a9a18c70b403d9d8cf1bbe491f079e9ec604b7b
-
SHA256
1ad4f66dd56a1567931c2d7646279bac490fcf2cee79e98bd2c9c2916f18c90d
-
SHA512
5133844154370d9bff64ce22609bfd4d06194662f56925b3ff885dd5cea3723fe5ead509776e9a96738faff0d7118e17f6fb03b6606c323a3367d8a8a6810606
-
SSDEEP
6144:08OZ4aXVG9LJ5Apc2hMa7x1t4Tui2r/coei/xP3SQOMPuFRZvC:tqgdJ5Jif7xEy9LKATTAk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74deab8118d8196b872ec99d0468a2ab_JaffaCakes118
Files
-
74deab8118d8196b872ec99d0468a2ab_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 252KB - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE