Static task
static1
Behavioral task
behavioral1
Sample
d362d135420cb8cf6aefb1af41714d1f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d362d135420cb8cf6aefb1af41714d1f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d362d135420cb8cf6aefb1af41714d1f_JaffaCakes118
-
Size
67KB
-
MD5
d362d135420cb8cf6aefb1af41714d1f
-
SHA1
9bb8389315586243931e74f9ce3cdbda5cb0dbc5
-
SHA256
d0a930a973a6a79e1b1cada69ab165d97a8d0a85cfaae2d1d360873e3ae80c51
-
SHA512
fe4f45b6a3e41951a88b93e3d5d747d225489038f161678d9c6a6d1acc44472e6eaad8ae2d3db5e9832f0ce5bfbd139519ebdea3e115960399c090ceca533c4e
-
SSDEEP
1536:/+fcrE2xKKxv2qUQ6NkIZtWdxzWkX3lQf9Db6jLSKG2UL2fCG:/OcZFxvRNEkpdXlQVDbTKj6S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d362d135420cb8cf6aefb1af41714d1f_JaffaCakes118
Files
-
d362d135420cb8cf6aefb1af41714d1f_JaffaCakes118.exe windows:4 windows x86 arch:x86
316f9661c85558da7e0cc9df6322c345
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
VirtualAlloc
Sections
.text Size: 1024B - Virtual size: 552B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.3rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE