Static task
static1
Behavioral task
behavioral1
Sample
95ab96887d84760aee7f33125795dc36_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
95ab96887d84760aee7f33125795dc36_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
95ab96887d84760aee7f33125795dc36_JaffaCakes118
-
Size
84KB
-
MD5
95ab96887d84760aee7f33125795dc36
-
SHA1
064d9126452dcc8cc32a0e8e907702874f6fd683
-
SHA256
de5a91da45ee7f2dc9432c9523f366fe624b55fb29f57a808280ebfc962629e1
-
SHA512
305f680c40fe7285c81fe90ee73d5897e3c9f54aa60cd470e7b1cab3447b18ef3df742f02209d123d993ad94402512c9e357345ba031d692254ff1c5913c5322
-
SSDEEP
1536:HFNw7HG2vIgWlDNZm9OC0J+/vnvAZ2ajHSK0gjpoziCl5Po48Wak+ZKswAalHEh9:lNL2xkBE970JuvMMhlO48lwAuC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95ab96887d84760aee7f33125795dc36_JaffaCakes118
Files
-
95ab96887d84760aee7f33125795dc36_JaffaCakes118.exe windows:4 windows x86 arch:x86
a126806e363ee62570831b91c5a854df
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BeginUpdateResourceA
DeleteFiber
GetProcAddress
GetModuleHandleA
Heap32Next
SetConsoleCP
VirtualProtect
VerifyVersionInfoA
VirtualFree
VirtualAlloc
WaitForMultipleObjects
ws2_32
send
Sections
.code Size: - Virtual size: 440KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 83KB - Virtual size: 84KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE