Static task
static1
Behavioral task
behavioral1
Sample
151bca4046e643d3d4db09de18a59372_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
151bca4046e643d3d4db09de18a59372_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
151bca4046e643d3d4db09de18a59372_JaffaCakes118
-
Size
30KB
-
MD5
151bca4046e643d3d4db09de18a59372
-
SHA1
d08969e02ae3bae81033a88dad453c1cbdb45ec7
-
SHA256
c0657d16c17429c7c6a77003e932cd30ece32a2c69b55a23bd75a8cce1f7cf6d
-
SHA512
a08b9e48be4ef32d08f8f3c8a077ae52dc622fb611dc5713bee0ba17755fb56044b09066b193379e84ce3d4bec8bff81d30ad745c4b3f88b47de29450b1c9533
-
SSDEEP
768:E9OMC/sljoWfu/f8zlB+AU3PcS82rSxqZCi/d/:E9OMCyjvfu3BAkPcS8YS+CQd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 151bca4046e643d3d4db09de18a59372_JaffaCakes118
Files
-
151bca4046e643d3d4db09de18a59372_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 20KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE