Static task
static1
Behavioral task
behavioral1
Sample
75bd2ae4da9690856a994bf0f3ec98fc_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
75bd2ae4da9690856a994bf0f3ec98fc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
75bd2ae4da9690856a994bf0f3ec98fc_JaffaCakes118
-
Size
169KB
-
MD5
75bd2ae4da9690856a994bf0f3ec98fc
-
SHA1
91a7af9d50ee8135a136b2c2c270530c0c24d61a
-
SHA256
684115220742f7712231d0d1c2b073a8cb0563bb42fc127b3fed3999ed921dea
-
SHA512
60839ff1b6d2aa8e669ea17e5c9a401dfc9d981d553a3de1dac82ee5b15dcc418dce680765a3aaa05468b5b340af4e525e94c2fc80ec3dc9d88bfa66d61c3c3d
-
SSDEEP
3072:+eJj/VHkk4ki1ZfT1cSfOhoJ+lzNa0VKWHb7wZe4hc/+HAzfr0Q:+qDp4/zJcSmGJ+BMGKW3K/AzZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75bd2ae4da9690856a994bf0f3ec98fc_JaffaCakes118
Files
-
75bd2ae4da9690856a994bf0f3ec98fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 152KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE