Static task
static1
Behavioral task
behavioral1
Sample
bda68ce809692c22eaaa3ebbec515957_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bda68ce809692c22eaaa3ebbec515957_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bda68ce809692c22eaaa3ebbec515957_JaffaCakes118
-
Size
164KB
-
MD5
bda68ce809692c22eaaa3ebbec515957
-
SHA1
60d9b6f69fd476c288aad8cbdcf7243706d2953e
-
SHA256
0d44959b887e2db9ca5e23fcfdf4a392303db7ced71e13b27e330f835bda84df
-
SHA512
5663b80ce64a87bc1bf0561c69eee7e8585bdba57bc3356cb4fa105eb6e787a8446843c5c624d6077a37fb3f2df38ff5feb1e71984392cc57cf50d6eb58be9f9
-
SSDEEP
3072:7rBupLDVE6xErnRJrf2f6JeZvjEAvQkwUyD2xfGUXIEk5SPEX7i:RmW6UtYRIAYkNyGfGZLov
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bda68ce809692c22eaaa3ebbec515957_JaffaCakes118
Files
-
bda68ce809692c22eaaa3ebbec515957_JaffaCakes118.exe windows:4 windows x86 arch:x86
7ff4c0bf321014ece3e5e94e7edae5b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
FreeLibrary
EnterCriticalSection
LoadLibraryA
LeaveCriticalSection
GetProcAddress
Sections
.text Size: 163KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE