Static task
static1
Behavioral task
behavioral1
Sample
b56967ce910954671d0a6e042ee268db_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b56967ce910954671d0a6e042ee268db_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b56967ce910954671d0a6e042ee268db_JaffaCakes118
-
Size
127KB
-
MD5
b56967ce910954671d0a6e042ee268db
-
SHA1
07a9ad8fcfbb8c4710204d0815040cd95116ee99
-
SHA256
4c82124ff12896e0da237732defdd0f05b4d5a4d59108b402b4f31ee3039bc28
-
SHA512
6d1d4f5401f3720ade93d029a1b8e1c463423d1f30a1943b77df661ea9f398c7bd60a5ba2da1ba724fcdc09292a3600f69ffd8fbec5f654f59d1afa303cfaaff
-
SSDEEP
1536:GC0OMcamTaWf1zwQVgv6I0YWKuHLl7mq+1N4f9JErvR8S+:VnamTa+1zwLv6E2LlXEN41oJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b56967ce910954671d0a6e042ee268db_JaffaCakes118
Files
-
b56967ce910954671d0a6e042ee268db_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE