Static task
static1
Behavioral task
behavioral1
Sample
dfa75a49ea80c76011c9ccb8f89fc1ba_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dfa75a49ea80c76011c9ccb8f89fc1ba_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dfa75a49ea80c76011c9ccb8f89fc1ba_JaffaCakes118
-
Size
117KB
-
MD5
dfa75a49ea80c76011c9ccb8f89fc1ba
-
SHA1
1fe98ab47d6a57f01b44d043f74953e43c56ee3e
-
SHA256
7e2ffb0da3d94a0d56f6c4c9f5b13191bfe62be6344252352f4e864de8c2a414
-
SHA512
496e57a5295670b1df6cc1600d70163fa70f3e433cbf100ba355e95fdc667eddc71752e958718ea39a110dfa0d70bafcbd30cd0c2bba553846e27086f5491d40
-
SSDEEP
768:gcRjOH0xZXpnz+grNCid2quguvUXfh8mFP5VtqxCF615qf1zBmQzTGfmgyq/3:MWDnzrCe2qubGfh9HVFi5qf1zwQVgv/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfa75a49ea80c76011c9ccb8f89fc1ba_JaffaCakes118
Files
-
dfa75a49ea80c76011c9ccb8f89fc1ba_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE