Static task
static1
Behavioral task
behavioral1
Sample
b254d2cc678cc28eecc9ee5d4e686ebd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b254d2cc678cc28eecc9ee5d4e686ebd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b254d2cc678cc28eecc9ee5d4e686ebd_JaffaCakes118
-
Size
93KB
-
MD5
b254d2cc678cc28eecc9ee5d4e686ebd
-
SHA1
5dd895da5f9318cd74f0973d94cb4045cacea7b8
-
SHA256
a9fbcdacbf56cdb23444c7bf643153a52ad876257a260a53ba0a45fa712e52cb
-
SHA512
bdab538c39c5ca686172b0baec3590968a83978d4fcfa7534378744615419dd4b72cf285b3a69279575bdfc794fa0702b6fce7c34bbbd9ec3842121b6663b6d3
-
SSDEEP
1536:NHygUSFEn7EypUo4xqL24iU0ALa3geI/yCX0ioAQXwyIYClqE/4946wjqhRTi1zR:zUSFEn7EQrCqnj0OXxFxlqEwbw6RTGzR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b254d2cc678cc28eecc9ee5d4e686ebd_JaffaCakes118
Files
-
b254d2cc678cc28eecc9ee5d4e686ebd_JaffaCakes118.exe windows:4 windows x86 arch:x86
b13545902a33a4fce97c4e9afd63445d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
msvbvm60
ord696
Sections
pec1 Size: 83KB - Virtual size: 228KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE