Static task
static1
Behavioral task
behavioral1
Sample
bc69dbc1a9088af173e8a400804898ce_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bc69dbc1a9088af173e8a400804898ce_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc69dbc1a9088af173e8a400804898ce_JaffaCakes118
-
Size
1.2MB
-
MD5
bc69dbc1a9088af173e8a400804898ce
-
SHA1
e845cb4b2aec25ea6a6e1ff8ae11a1c413894000
-
SHA256
97475f0044a81a3e33027e46451c4e6cc352e8c5e84832bd731f3d1ef025bf2d
-
SHA512
23079d106a6ac3ac97e540733d3c4cad66c9fd1a47fa9efb06a9d21edbfeb522591ecfec41918cfc2e42aa36000767162e2e08f48cd6178c5726aacbb8dbcda3
-
SSDEEP
24576:uitQVHTBs4LlC4mHpEHSrQT0J2BmqeKRcR39vFT2RvH+WGzIrMM6fZ:2A4Llh6SSrVxg6pp2JeWGzIrMM6h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc69dbc1a9088af173e8a400804898ce_JaffaCakes118
Files
-
bc69dbc1a9088af173e8a400804898ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 1.2MB - Virtual size: 5.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE