Static task
static1
Behavioral task
behavioral1
Sample
b03565257c4f1e8d86eed83406570126_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b03565257c4f1e8d86eed83406570126_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b03565257c4f1e8d86eed83406570126_JaffaCakes118
-
Size
43KB
-
MD5
b03565257c4f1e8d86eed83406570126
-
SHA1
f76bce30a4c0009bee1fe6f0c7e64b99aa2f362b
-
SHA256
b107328eb412a1eb035f3ac822bfda6b74fb23e92a0eec11d6c3ac32f90147c0
-
SHA512
db35151333ad855f3abf5ef453469b3f08aeeb226ee3c8facbc9ad3603f876732b7511ef5ab5c3bd631279e163c4613bb6e0124df89a2cb0c22c6e8054ce7aea
-
SSDEEP
768:xTAm5hiTllzeF/AJOTmbWa8RYdiU3/7Shy5nv9/Xmw0brAkomrVW:xLIcNTcWATPuhI9vmw0M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b03565257c4f1e8d86eed83406570126_JaffaCakes118
Files
-
b03565257c4f1e8d86eed83406570126_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 30KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE