Static task
static1
Behavioral task
behavioral1
Sample
f61e76a9e2547b6ceab591eda1bd90aa_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f61e76a9e2547b6ceab591eda1bd90aa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f61e76a9e2547b6ceab591eda1bd90aa_JaffaCakes118
-
Size
31KB
-
MD5
f61e76a9e2547b6ceab591eda1bd90aa
-
SHA1
4230cd0b74b3b894304a74704028e0adfa96f199
-
SHA256
27f92a1b77ea1094c07a3e5e312823fe33a39dff592478027352c48d8dc1e343
-
SHA512
02253e8034559e13224e24a48723f68c80d340da143da8688385391d34668436c48763c90b6a099a2c7f625cd98bad43460ae6f29dbaaa8c393a7a2d3f90a8e6
-
SSDEEP
768:ny6R64ZvQBRcIgf40vsa1dgBpKLE837nCJQ+gOi3d/:nZRtOOgKf3EQzOkd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f61e76a9e2547b6ceab591eda1bd90aa_JaffaCakes118
Files
-
f61e76a9e2547b6ceab591eda1bd90aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 21KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE