Static task
static1
Behavioral task
behavioral1
Sample
770f6df83c810cbbb9fe2adc3495c955_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
770f6df83c810cbbb9fe2adc3495c955_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
770f6df83c810cbbb9fe2adc3495c955_JaffaCakes118
-
Size
65KB
-
MD5
770f6df83c810cbbb9fe2adc3495c955
-
SHA1
2f029f074561fdebac0fc358f545a2c563966667
-
SHA256
19de9b76dbfc5225f59c57a1070f5298cdd7f431bfcbe2238d0184ce49b245c4
-
SHA512
f923fa3fa967cdf007c7140d7c0345679e432c2da819c3de622b0249ad255436bdda3c80f263d1bb34ea70688230103788ba23a26d4af221b50476c1a3319f84
-
SSDEEP
1536:lp/H4bUbE5ZmlqHRwRXMMGBkyJMjZROYJT3bQghxHCZAnZddn:lpvng5Zm8wRcaCenZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 770f6df83c810cbbb9fe2adc3495c955_JaffaCakes118
Files
-
770f6df83c810cbbb9fe2adc3495c955_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 25KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE