Static task
static1
Behavioral task
behavioral1
Sample
a74e6c8e23a0a863e8f8d650d1bbb1a4_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a74e6c8e23a0a863e8f8d650d1bbb1a4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a74e6c8e23a0a863e8f8d650d1bbb1a4_JaffaCakes118
-
Size
13KB
-
MD5
a74e6c8e23a0a863e8f8d650d1bbb1a4
-
SHA1
a11bb3dfafb6d8cb61227a806abe1190ec306c0a
-
SHA256
1146d7b3644428d8d8c7d14c69164fea6430e0b45bbbe0a94962bdf12627dc97
-
SHA512
6211c05cb647fd61e2fdb0ce5ec76e817fcb274c192a85d607ffd94a5d26a078e738e28cb6db02b6e038fccabcb6126b12dcee07c7e5c217c0d1192d278620c3
-
SSDEEP
192:nnSlgn1IeV5uUuArTiHKBWDkJBGNJE1LYZf15pAWkthEjv+j2NjeX0B3:Slgn1I4uPAr6KBWAJYAYvzMhsv+/kh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a74e6c8e23a0a863e8f8d650d1bbb1a4_JaffaCakes118
Files
-
a74e6c8e23a0a863e8f8d650d1bbb1a4_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 9KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE