Static task
static1
Behavioral task
behavioral1
Sample
dea52b68239b746cf3431efd5ef0ccf6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dea52b68239b746cf3431efd5ef0ccf6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dea52b68239b746cf3431efd5ef0ccf6_JaffaCakes118
-
Size
166KB
-
MD5
dea52b68239b746cf3431efd5ef0ccf6
-
SHA1
489eb8d92393c1e8e122982738d5236a8cba18ff
-
SHA256
c9fe061552c246eeaa464c2286b6d9986f0a27db3842fb4fab0b4dc03d229ba8
-
SHA512
8a0bb36648eb277cae5ca1b6eb7a2f0c0f4fdbac813aae5349b08da23911ae60c20e7dd3f58243a62b6dc1bb0ceeab6adf67ab61cd04d1225693e91e0977c065
-
SSDEEP
3072:kamgrikhQXTd5fEWZBFP+S95UAcg3cKrARbswAsbfLlZH5NEcs/bCvjnjlQ:kamgrhITDf3ZnP35UArrcbFbfXHfEcqP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dea52b68239b746cf3431efd5ef0ccf6_JaffaCakes118
Files
-
dea52b68239b746cf3431efd5ef0ccf6_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 131KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ani Size: 27KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE