Static task
static1
Behavioral task
behavioral1
Sample
bb9ccb891ed8a0ddc62894e69298a3af_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bb9ccb891ed8a0ddc62894e69298a3af_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb9ccb891ed8a0ddc62894e69298a3af_JaffaCakes118
-
Size
742KB
-
MD5
bb9ccb891ed8a0ddc62894e69298a3af
-
SHA1
326440fcc1d32af1e8c8b5fd759cda4194fd613e
-
SHA256
ccb10bb2e6c314801053d1f23188aafd3b732357c0e86ab1dd048005df17265b
-
SHA512
8745f90638399210a6486ef347bd5e2d96330db59a129c731b69633d162a019d04e9d19f10c4354fbb7952d2832993a96561d55de173b839413e24a256f0b2a7
-
SSDEEP
12288:Pvehvl3b6cK4QJrr186amIWge+RCQdyIMA65xb/T+ZXmwWE43LY/g5B3j:PvehvJbZKXJrr186amIWgVRFyIMX5xv5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb9ccb891ed8a0ddc62894e69298a3af_JaffaCakes118
Files
-
bb9ccb891ed8a0ddc62894e69298a3af_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE