Static task
static1
Behavioral task
behavioral1
Sample
827ea4ccc49473ee12065e1c8b72024a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
827ea4ccc49473ee12065e1c8b72024a_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
827ea4ccc49473ee12065e1c8b72024a_JaffaCakes118
-
Size
80KB
-
MD5
827ea4ccc49473ee12065e1c8b72024a
-
SHA1
0b89f20611021326debe4a8d9b15084df7a26bd1
-
SHA256
4f38bd7e243d09dbe6f391bdff72bb39634f47edd76c2e746e006c4474271a25
-
SHA512
2d5b6eb71959012a65c2a331df099510b7573115f568ce5e5eb4f521fc51a2b01df52924ebfb77f90dbd55b4bfcb900cd96260f6f04c6ed744c6d8fa190e84c7
-
SSDEEP
1536:/70spVbfKv2DHEv+x31yrwbPa5Gh2MjQpk6wZEaRhdsRRII:/VK+bEv+1bPa5K2MjMk6wZEajKII
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 827ea4ccc49473ee12065e1c8b72024a_JaffaCakes118
Files
-
827ea4ccc49473ee12065e1c8b72024a_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 38KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE