Static task
static1
Behavioral task
behavioral1
Sample
0db6fc29d6b53d7fa934eb7454c7d5ce_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0db6fc29d6b53d7fa934eb7454c7d5ce_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0db6fc29d6b53d7fa934eb7454c7d5ce_JaffaCakes118
-
Size
37KB
-
MD5
0db6fc29d6b53d7fa934eb7454c7d5ce
-
SHA1
f31768236f6b8b9a934c82c09929ae91b690ee55
-
SHA256
c5ebbc2564c6d55dea37f3ac0bdf75efb17c4b82f3b3ed388945008a593f6e63
-
SHA512
584ce40936db91e2753eb3e46c8e557b67c8a25b494dd3b3bac66a0975a1c59749d7274b9a2164b8583fe72c637dfe44f4779ceaac93136615c929ed719182aa
-
SSDEEP
768:Ihrt9vs7IxmQa2JbYLjS2FeL8zzWzpwsEZCHiJG7UoYPi0UD:urtFeIYf2JbY/eazCisEeiFJM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0db6fc29d6b53d7fa934eb7454c7d5ce_JaffaCakes118
Files
-
0db6fc29d6b53d7fa934eb7454c7d5ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
e58ab46f2a279ded0846d81bf0fa21f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE