Static task
static1
Behavioral task
behavioral1
Sample
11e5e31fc13bdd393a967fa9e58edcb1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
11e5e31fc13bdd393a967fa9e58edcb1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
11e5e31fc13bdd393a967fa9e58edcb1_JaffaCakes118
-
Size
1.4MB
-
MD5
11e5e31fc13bdd393a967fa9e58edcb1
-
SHA1
3e11715accf3b5a2132583a7621d75d33b28f71b
-
SHA256
c00c743c590348c4a4f9dbfee72101106551476a3f5439a8738cc35f36189e3b
-
SHA512
ca9a7446968d9ae5cf7bdfadd3dd7f17939ad29942d5a49d2a82e76b24838a2f8974253d585f3cb275a618bf5e2861b784df36bb00c73ce2e9170deb9755349b
-
SSDEEP
3072:1jG4pPhLI1zwLv/2IfwNegindp7Pqge/3a+:ZG0PhLI1zHIjgindVv43a+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11e5e31fc13bdd393a967fa9e58edcb1_JaffaCakes118
Files
-
11e5e31fc13bdd393a967fa9e58edcb1_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE