Static task
static1
Behavioral task
behavioral1
Sample
75c7a1dbcc3420780532a6e2facbf538_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
75c7a1dbcc3420780532a6e2facbf538_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
75c7a1dbcc3420780532a6e2facbf538_JaffaCakes118
-
Size
76KB
-
MD5
75c7a1dbcc3420780532a6e2facbf538
-
SHA1
7cacabe145c35abe837b829773b45e04755767aa
-
SHA256
eab52ccc6e8bf42b9f34e65efdcedf5b8e4a8626c0b9788155d646b7685d9053
-
SHA512
0d554c2d38e20393c4b31b233034620ed159346e2398e03965cf9c5a75d93d3556fde0e511925aceec1fae71bc77b9f7805b97a7348f7d50635b1695274cc950
-
SSDEEP
1536:Moq7JjvzjJRFO7vHTUvklYegiWfqQ4jtlm4+pjVrs2ryrd1vUQuq6:5yJjvzjJRFO7/gMjgB4z+Hs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75c7a1dbcc3420780532a6e2facbf538_JaffaCakes118
Files
-
75c7a1dbcc3420780532a6e2facbf538_JaffaCakes118.exe windows:4 windows x86 arch:x86
af03e73d7d1d6be603d2a8082243e76a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsAlloc
ExpandEnvironmentStringsA
WriteFileGather
EnumLanguageGroupLocalesA
DuplicateHandle
TransactNamedPipe
WriteTapemark
GetProcessHeaps
CreateProcessInternalA
RemoveDirectoryA
InitializeCriticalSectionAndSpinCount
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE