Static task
static1
Behavioral task
behavioral1
Sample
d19f3a63cda6b169fe1f47cc90e5f6e0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d19f3a63cda6b169fe1f47cc90e5f6e0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d19f3a63cda6b169fe1f47cc90e5f6e0_JaffaCakes118
-
Size
183KB
-
MD5
d19f3a63cda6b169fe1f47cc90e5f6e0
-
SHA1
60141ba4cb82bd9373e884aefee465b6ca8ccb8b
-
SHA256
89618752ab5cd170f762f4132ab5889d35f95e351fae22797c84e567cb284454
-
SHA512
64fdeeabec2f3c9dc82f3aecaef87be1709245920756e138845b72152b473981bb13bb233f8d8defa6582967cbb0cc8c224fcad503edcc04b68af6a79ce04a26
-
SSDEEP
3072:ykzU8SLK9YkHq1yBK8+BqvHxr+HMzcBB4g8VUXhKtnzz3Kz3rk2CttyA1EwYUKQH:ykIKi2rzv1+HMz84JoYtnzS342Ctcw2o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d19f3a63cda6b169fe1f47cc90e5f6e0_JaffaCakes118
Files
-
d19f3a63cda6b169fe1f47cc90e5f6e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 154KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE