Static task
static1
Behavioral task
behavioral1
Sample
ff766619a315d0bde5c791bc0fe631fc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ff766619a315d0bde5c791bc0fe631fc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ff766619a315d0bde5c791bc0fe631fc_JaffaCakes118
-
Size
113KB
-
MD5
ff766619a315d0bde5c791bc0fe631fc
-
SHA1
343d36fc905c9640e49bc9e39725f9b5f3215da4
-
SHA256
7e75705308a3bb1d1aca4f4351c26cce6257ce5651d0057793954c9d7a16f7d6
-
SHA512
9750f6b7921789904fd04848bb438835eecb4a99ef053b180cf4d15ced05b3bad7618d33223dcd7bab8a513320db0a7c015af4adc347d060d7df737f94e4b744
-
SSDEEP
1536:oHI7O2hMGs0QyFgyxIQrtcnRqvlZK5J8gRorcqrzuuvIk:R7O2hMGsKFgSciKlKcQu+I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff766619a315d0bde5c791bc0fe631fc_JaffaCakes118
Files
-
ff766619a315d0bde5c791bc0fe631fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
36e8df4802658ed39d283dcfa613b7c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
VirtualFree
GetModuleHandleW
Sleep
ExitProcess
winmm
timeSetEvent
comctl32
InitCommonControls
Sections
.text Size: 512B - Virtual size: 254B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ