Static task
static1
Behavioral task
behavioral1
Sample
95d643da39669978c4fb908a3f5a72ba_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
95d643da39669978c4fb908a3f5a72ba_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
95d643da39669978c4fb908a3f5a72ba_JaffaCakes118
-
Size
654KB
-
MD5
95d643da39669978c4fb908a3f5a72ba
-
SHA1
a83557ac1403accb17dddc1f8e86548452775ca0
-
SHA256
2453a96bfc0c929a33096f3dfcc2269f1868ad3527195d8202b320e3e5c89f3d
-
SHA512
724dc038be0c901558e73d77699345238e1b6ad55c3ead9f74272483236707d009f5efedf5b98a38c768fe352daa126b713ef65a6e65cb77406f8d849110c30f
-
SSDEEP
12288:Mi50YbtLkDDNKuzjHIt5u7j338N33Z1xpIqSxhQswrf2ypd13zj+dgbQ6f3wKvwC:tLZADDPzLIt44lZ1xHiyswT2Qd12dGQY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95d643da39669978c4fb908a3f5a72ba_JaffaCakes118
Files
-
95d643da39669978c4fb908a3f5a72ba_JaffaCakes118.exe windows:4 windows x86 arch:x86
b8111320f794d9e62a7ffe5d84bed59a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualFree
VirtualAlloc
Sections
hmimys Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmimys Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmimys Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE