Static task
static1
Behavioral task
behavioral1
Sample
e06a732ede134d808a033c5fad9b5f70_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e06a732ede134d808a033c5fad9b5f70_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e06a732ede134d808a033c5fad9b5f70_JaffaCakes118
-
Size
202KB
-
MD5
e06a732ede134d808a033c5fad9b5f70
-
SHA1
1c5b63c463e9578c38e39d0c49f9824a21c56469
-
SHA256
67bef311c2ce6eff2a941a2951ca5e0197bf6a7f9cfa517fa3553e92c9d1f41e
-
SHA512
467537accaed0c3cb32050b3422b2f061e6c37013a9d2c75f25da66b336ca2ebc2efb6793b2d5e2792d1e0ded72d39dd2b6c3492091440d9f51d02fe06ad497c
-
SSDEEP
3072:IeqpRb/eky+2WG1gSEJUE3ngYH174b1zB5M/MjpvVyhSMoQIse2z9Kdy:hqpSeSEJJngY81vMkLyd1jU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e06a732ede134d808a033c5fad9b5f70_JaffaCakes118
Files
-
e06a732ede134d808a033c5fad9b5f70_JaffaCakes118.exe windows:4 windows x86 arch:x86
bb73be7de9eed8e454e2c39edcbc17f5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
_CIcos
oleaut32
VariantChangeTypeEx
Sections
Size: 195KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE