Static task
static1
Behavioral task
behavioral1
Sample
e07789324344abdf48e768cb53e296ac_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e07789324344abdf48e768cb53e296ac_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e07789324344abdf48e768cb53e296ac_JaffaCakes118
-
Size
48KB
-
MD5
e07789324344abdf48e768cb53e296ac
-
SHA1
c9b71cda6990294ca94d076c07b4cb70156a27e6
-
SHA256
f2a9571db052e16e0f3fe893fcc94371d15f9f96a653c13cf84c71cc8cac3db1
-
SHA512
a96896e1b36124cc4081f06c8642c22c551bc4a7765ea1d7b71ed3a7ed2f5d496eed64c4e96485038d36d1c7f6e81cd0e2342c5960c89c62ce2aa58870e7cc04
-
SSDEEP
1536:dFjIVfAvuyKXre+hPSjyZ6yqqROIVPOftdn7RtdE6VaRA:zjGY6rexjynrRfPqdEYaC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e07789324344abdf48e768cb53e296ac_JaffaCakes118
Files
-
e07789324344abdf48e768cb53e296ac_JaffaCakes118.exe windows:4 windows x86 arch:x86
d627580758f3499c928997b2e73e2085
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 232B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ATTACH Size: 26KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE