Static task
static1
Behavioral task
behavioral1
Sample
77ca212d15e78513e90d56340072b23e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
77ca212d15e78513e90d56340072b23e_JaffaCakes118.exe
Resource
win10v2004-20240729-en
General
-
Target
77ca212d15e78513e90d56340072b23e_JaffaCakes118
-
Size
252KB
-
MD5
77ca212d15e78513e90d56340072b23e
-
SHA1
7641bc0ba289aa70fb30119602b6dee22dcef3e9
-
SHA256
e557d52c1b83f83708e5a61affa143241203d4550387aa3daf5cc0e0fb44afc6
-
SHA512
19ef48dcba693d3da178d708c39861a6f26508a66bca60a8a08ba95b532d44eeb33f9fe7a52135376dd8ea2d8d86743a9293ceb63f5141f8ff54875671e486a8
-
SSDEEP
6144:RmKMiNHaIeJbq2Qd50kGpJoM5DVQeI1E6W/MMIhBIAOgH4:1MsHYbq+T5O3FW/MjP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77ca212d15e78513e90d56340072b23e_JaffaCakes118
Files
-
77ca212d15e78513e90d56340072b23e_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.code Size: 226KB - Virtual size: 980KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE