Static task
static1
Behavioral task
behavioral1
Sample
76be2f0886da9c81bdb96f02ced2595a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
76be2f0886da9c81bdb96f02ced2595a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
76be2f0886da9c81bdb96f02ced2595a_JaffaCakes118
-
Size
84KB
-
MD5
76be2f0886da9c81bdb96f02ced2595a
-
SHA1
1a53afc1a7aa7bfa784ccf73bb0ab656c313b4f3
-
SHA256
84727db514777ae92116367bbc1723b0af40b283e7c50a28cbc9ec8e45a21936
-
SHA512
4b9386c6f150226bd1014610bcdd789fc5f5cfa3920a33d325c32d62a615f1d6a1acd304f3240b9c8efee65e9f412032bc2a9cf364b60a582795f58353703d82
-
SSDEEP
768:EOGFWj5C2xhBtAeLoAodBXs2QSBV848F4ALyTNiR4yNA5lViUdyJWAE:3GFWjk2HAMuB82QSAbF4A1elVi8AE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76be2f0886da9c81bdb96f02ced2595a_JaffaCakes118
Files
-
76be2f0886da9c81bdb96f02ced2595a_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 42KB - Virtual size: 472KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE