Static task
static1
Behavioral task
behavioral1
Sample
95fe20c1ea5b64d9b77daa5064b99e97_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
95fe20c1ea5b64d9b77daa5064b99e97_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
95fe20c1ea5b64d9b77daa5064b99e97_JaffaCakes118
-
Size
69KB
-
MD5
95fe20c1ea5b64d9b77daa5064b99e97
-
SHA1
b35602c367289169074c485624b448f46c81387b
-
SHA256
e9eb5e90ed0af57205e0cdcd72757fcf1b1601da55d12eab2f2c65c4578457da
-
SHA512
1923eda056c610e77825778f978fada218ad8e391685cce5851cbedfe1c6b19cac0b37f6f5f6c08c2d8d4d0b884bb3053cd7b314bef18b1d63c02bfada83688e
-
SSDEEP
1536:uWoy/Kj3ZD87b/BiKi/FqkiwbjutVU8yVkmzsMl2kgFXWaUa:uWob7ZK/BOFq8bqbyVkmzsMl2k2Wat
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95fe20c1ea5b64d9b77daa5064b99e97_JaffaCakes118
Files
-
95fe20c1ea5b64d9b77daa5064b99e97_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 64KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE