Static task
static1
Behavioral task
behavioral1
Sample
77610eccfce1737fafed9125657209e9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
77610eccfce1737fafed9125657209e9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
77610eccfce1737fafed9125657209e9_JaffaCakes118
-
Size
455KB
-
MD5
77610eccfce1737fafed9125657209e9
-
SHA1
59f428ac9aa56cef6f24fac523db26d41d925aad
-
SHA256
522639eed868322749299ff6ea817cca240403ed862ae009cce15440b55692ae
-
SHA512
cfe47ff41b2e1f9f1126a2321c58e3eb4f5edf646bf401fcffb6b635c02ab6e223c9e5e2f4073afee7058897a0fd81df6f18aed13ac43176591a4a27090c8b9f
-
SSDEEP
6144:rDK13Sw6N5z7NYRghepced75fDuWO24C26UpS4lTQ1PFNgFKTgxdEAQe+DlkR5La:vkwV5PkxdwWO24X6yS4JaT31XkRqK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77610eccfce1737fafed9125657209e9_JaffaCakes118
Files
-
77610eccfce1737fafed9125657209e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 440KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE