Static task
static1
Behavioral task
behavioral1
Sample
b621e2d29ca5ba0fac9cf92d1c6367a8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b621e2d29ca5ba0fac9cf92d1c6367a8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b621e2d29ca5ba0fac9cf92d1c6367a8_JaffaCakes118
-
Size
76KB
-
MD5
b621e2d29ca5ba0fac9cf92d1c6367a8
-
SHA1
ff6a23c06241ef88536a674c2d50fccb3eed0033
-
SHA256
44ddb9362e90a3d0396c0f9559c51e7429329b46a39f7b124991a6e9f055fea9
-
SHA512
bf08121c0649c70acf0097af6a57e17c352069b9ae974440de1ae2b6194756e63e77e8f8a7b3626e3d257fa2b6b7563af5842b55d5e914999580032466aeed0e
-
SSDEEP
1536:R7/A29F5MHo5pixrWL+UXW+iCVsiReekNmxHNYWKF3lfQrk0oUmarN:dFFXofQz5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b621e2d29ca5ba0fac9cf92d1c6367a8_JaffaCakes118
Files
-
b621e2d29ca5ba0fac9cf92d1c6367a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
394b3e18e03537a1c51f949fab757567
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
msvbvm60
MethCallEngine
Sections
xxxx Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kuii Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.frt Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ