Static task
static1
Behavioral task
behavioral1
Sample
757d7d54dbb81e42194c13d768311eaf_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
757d7d54dbb81e42194c13d768311eaf_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
757d7d54dbb81e42194c13d768311eaf_JaffaCakes118
-
Size
150KB
-
MD5
757d7d54dbb81e42194c13d768311eaf
-
SHA1
435d1ed73289023c9027b6e8e5b2b01e21611058
-
SHA256
68e36a7714e9137e9e13985523aa6061839fad4fbb3225157d43d6fe393f7790
-
SHA512
fe6c22a8a764470b356531e0375e05202cf772931edf50a906815635b5c115ce51bd5bf5f52fc86329270daae768b8156bd4b06f0ebbb1484b34fa2ba8dd3e1b
-
SSDEEP
3072:BZBilNYfh751dg4SieidCRME8tdsl0fCXbI592h0hzRy/nnVN:JilNYDvSieiCRMEEdOcCL495zRy/7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 757d7d54dbb81e42194c13d768311eaf_JaffaCakes118
Files
-
757d7d54dbb81e42194c13d768311eaf_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 140KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE