Static task
static1
Behavioral task
behavioral1
Sample
b193c21ef113f670b01bcfd2b4fe7943_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b193c21ef113f670b01bcfd2b4fe7943_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b193c21ef113f670b01bcfd2b4fe7943_JaffaCakes118
-
Size
41KB
-
MD5
b193c21ef113f670b01bcfd2b4fe7943
-
SHA1
bbb57a3e496db9b5e2ab4a149330cb73a7c78982
-
SHA256
1d820f85f5a1a20e10ea0d35a41337f12829d15e31c6c70505d9dce73540fe8e
-
SHA512
6894c8427863852e4e152489ab737bb5f5d99a1f8fade41bddd3764c28823577fcb2715acc2f58425ed9f633ade66a66ee0ba56bcc65e1e9089dee2d15f9839b
-
SSDEEP
768:4Ll3U95OVwI5C1Y/RelQ7cTVq1Bmye2CrGTrC/X/QKfWkylT:6RoUVhC1MRKTczOxrum/QK+kUT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b193c21ef113f670b01bcfd2b4fe7943_JaffaCakes118
Files
-
b193c21ef113f670b01bcfd2b4fe7943_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 36KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE