Static task
static1
Behavioral task
behavioral1
Sample
c95b977ee5aca8d62a2a46b6c1dfe71f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c95b977ee5aca8d62a2a46b6c1dfe71f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c95b977ee5aca8d62a2a46b6c1dfe71f_JaffaCakes118
-
Size
392KB
-
MD5
c95b977ee5aca8d62a2a46b6c1dfe71f
-
SHA1
6fe0f2b43573fbde7917651422e7f093f7687f51
-
SHA256
1cca3d8aeb733d0bc54f329536af6a53207fc9ebc3d60f4f92bd1262a0ff372a
-
SHA512
e1e3378f65d414bed1aff03194eb9180ffa932d59720e62af8979118d7dd828a1ec856efdcd707641f78ace072c821c362fab9872356d178e317c74ecd963727
-
SSDEEP
12288:DTvr/GrQ/ttID75jczTIUVr4hK6wrxkIwLG7ql:DLy8ttID75QnqKHrxkhGu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c95b977ee5aca8d62a2a46b6c1dfe71f_JaffaCakes118
Files
-
c95b977ee5aca8d62a2a46b6c1dfe71f_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 341KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE