Static task
static1
Behavioral task
behavioral1
Sample
76ce8a514fa66e0bae4a129386c5e9fc_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
76ce8a514fa66e0bae4a129386c5e9fc_JaffaCakes118.exe
Resource
win10v2004-20240729-en
General
-
Target
76ce8a514fa66e0bae4a129386c5e9fc_JaffaCakes118
-
Size
32KB
-
MD5
76ce8a514fa66e0bae4a129386c5e9fc
-
SHA1
806218e4eeaf93988a6be39c4b22a30ad9aa38c7
-
SHA256
5ae90966e25035d4766bae39a0d092a241541daada020ed13622632f2a9b9e3e
-
SHA512
522d23f7f76ec1ccabcb4a111c9aa6486c4cf70cda77fe5d68d5b3a01b060732fa88c47f4fbf295d59953cb1b53ce46955d1cfe5e2ad401823665b639e589c07
-
SSDEEP
768:PZQAooesdx64w7jcRzxyn7nEkBPmDfS4yl81bQKM:do8dx3yszxq7EkBeD6l8fM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76ce8a514fa66e0bae4a129386c5e9fc_JaffaCakes118
Files
-
76ce8a514fa66e0bae4a129386c5e9fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.data Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.decode Size: 32KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE