Static task
static1
Behavioral task
behavioral1
Sample
07074516fb9073f32bc178d1e7abfdd4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
07074516fb9073f32bc178d1e7abfdd4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
07074516fb9073f32bc178d1e7abfdd4_JaffaCakes118
-
Size
71KB
-
MD5
07074516fb9073f32bc178d1e7abfdd4
-
SHA1
2f7815bf69eda9d19cd5c54f2162a01fd3efb23a
-
SHA256
65b1194a218c48a8834e38db2ef0ea40b91020b57ad899eb5f39f03f159ab370
-
SHA512
293ba55affcf023c3ad8bc397ec85d60f167059b0038e7901bceb65b97e42bcc7e8795594738a58760f249d5050c6bf85f2dd27902e515a97f1d4a5e60d4d347
-
SSDEEP
1536:bT5KZeQWQOuRjlW0IZ6Fg1FeEEAbriVsdYqSJ:niejuRjgdFePAbuCdY7J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07074516fb9073f32bc178d1e7abfdd4_JaffaCakes118
Files
-
07074516fb9073f32bc178d1e7abfdd4_JaffaCakes118.exe windows:4 windows x86 arch:x86
807d4dbf88522aca43243ab895fbef96
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32.dll.
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
Sections
.text Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE