Static task
static1
Behavioral task
behavioral1
Sample
95154250f893d1b52c948afb98f2c5d4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
95154250f893d1b52c948afb98f2c5d4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
95154250f893d1b52c948afb98f2c5d4_JaffaCakes118
-
Size
16KB
-
MD5
95154250f893d1b52c948afb98f2c5d4
-
SHA1
b1d2b8396079ebcb7203ebd1d8fe108abf7b2e0b
-
SHA256
6d3b8a76a3f367405e2897a0aa87e8c9ec0081d3a751a14691b0683ec3b68b12
-
SHA512
6c47b8830d1851c857fdbfe4a5d0a425e908b953352bc2d6c2dc11314753def9e61bcdee170763cb53a58ef3e92797b8fba553e25682bb08ef962aa76a951ecf
-
SSDEEP
384:mumN6yvGTna/4zVJkIt2SYNM3gF82s06F8LMb:l86bTagzrkw2a3gSL06WLC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95154250f893d1b52c948afb98f2c5d4_JaffaCakes118
Files
-
95154250f893d1b52c948afb98f2c5d4_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 12KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE