Static task
static1
Behavioral task
behavioral1
Sample
b7bba1aa96a30245fb77b196656e78c3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b7bba1aa96a30245fb77b196656e78c3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b7bba1aa96a30245fb77b196656e78c3_JaffaCakes118
-
Size
370KB
-
MD5
b7bba1aa96a30245fb77b196656e78c3
-
SHA1
fcc113a394eaa105cc91f6b3b700734189600c85
-
SHA256
6e19851e694c1254a3838e2ab3743026d8c8d0e06b10e415fd055665a74d29e4
-
SHA512
d4322ae914c9ec5e88e0d88f3dab1a52e64c809713321d7bbb38d0c3f7e7ac8328e14eba8c2cb3abcdde319397d71036a1f920153b82af0030338c3cfef23627
-
SSDEEP
6144:Kv6lENFTvMhwlwznQH3XZ9iHcvrYBseMguMLL/Yf8Q1Y0Ykj/:9+2Zy3Ti6rV2jTYr1NBj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7bba1aa96a30245fb77b196656e78c3_JaffaCakes118
Files
-
b7bba1aa96a30245fb77b196656e78c3_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
grehregr Size: 352KB - Virtual size: 800KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE