Static task
static1
Behavioral task
behavioral1
Sample
0d16c1fb770853d5bc0feea2963b069a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0d16c1fb770853d5bc0feea2963b069a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0d16c1fb770853d5bc0feea2963b069a_JaffaCakes118
-
Size
72KB
-
MD5
0d16c1fb770853d5bc0feea2963b069a
-
SHA1
a04433916690c05732d31a213c7526b5678bf94c
-
SHA256
baae1f1d27c8f62bf14df2ad27ccb288c9f2870d9ce6b720c561fadfe0f1afa0
-
SHA512
432013a376a0138ef7e68f2a0052578712b03e20493700fce84d822d2ffcbd37f20c187f426b533addd091c4783e3d2e7b96324ea50e5ab7c802b82680b11b30
-
SSDEEP
1536:7dhPc8pOK7E6988WUPdpqXDSMYXKTbouidVyl:7dhEl6XqzS/u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d16c1fb770853d5bc0feea2963b069a_JaffaCakes118
Files
-
0d16c1fb770853d5bc0feea2963b069a_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE