Static task
static1
Behavioral task
behavioral1
Sample
9fe38b1e3d541388b56a603ffa9920a4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9fe38b1e3d541388b56a603ffa9920a4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9fe38b1e3d541388b56a603ffa9920a4_JaffaCakes118
-
Size
22KB
-
MD5
9fe38b1e3d541388b56a603ffa9920a4
-
SHA1
56a60f8563cdb0171c55de526b0f58f593091a42
-
SHA256
17c9fca541b138045a886e16b7e3881a0fd69dfb39187cb966dd653d1aa9e790
-
SHA512
d830b6e51f3e5620f05015bf04c330abd1071df355224961c2695c436f800a12c5e46d748167a60fa1eed9d0cbca3c94f7e7dfd5dc882a3519d780cbd14e5edf
-
SSDEEP
384:JgK+aczPVLXOjtYel7ZZH9Ej3MoYn8N1YmnrtFyxAaLJylcoq///:JI/1Ojt1nuYGYYtFKnJyid/3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9fe38b1e3d541388b56a603ffa9920a4_JaffaCakes118
Files
-
9fe38b1e3d541388b56a603ffa9920a4_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 12KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE