Static task
static1
Behavioral task
behavioral1
Sample
76b3c12bbc1769bbfc05b38b135798e6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
76b3c12bbc1769bbfc05b38b135798e6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
76b3c12bbc1769bbfc05b38b135798e6_JaffaCakes118
-
Size
65KB
-
MD5
76b3c12bbc1769bbfc05b38b135798e6
-
SHA1
2e184043ebdd2fa35443ffc55d1025d92fb9ad64
-
SHA256
1630bf83abc8a7cb7319c6a9a82877937b06a6ab5ddb6a384b74ff466964a5bf
-
SHA512
78d6bb073ceb614c72ccc6b383b310c865fe0f31a938651aff962c6245b67ea5896825a1fd0547ef2f76e9b5e76b716d2ba00d2df5995e94de786232171dbf7f
-
SSDEEP
768:xIfPTR7pQDvsUXtZv/PGTJBIydFpDqrLhA1GNtO8oMCaIoOxTC5X5jXYxCKztcrx:xgyn+TJHpevhASiKjMVRkjGuBqT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76b3c12bbc1769bbfc05b38b135798e6_JaffaCakes118
Files
-
76b3c12bbc1769bbfc05b38b135798e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
119ba01abad812c4a461368344bcd6cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
RtlZeroMemory
VirtualAlloc
VirtualFree
VirtualProtect
Sections
.pepsi Size: 62KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE