Static task
static1
Behavioral task
behavioral1
Sample
124139ec2f9a7795410a88c8923158dc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
124139ec2f9a7795410a88c8923158dc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
124139ec2f9a7795410a88c8923158dc_JaffaCakes118
-
Size
7KB
-
MD5
124139ec2f9a7795410a88c8923158dc
-
SHA1
87a79e74d788af3bdf1d253f8cd3c63246f5ff28
-
SHA256
b62286701b58d424e1059ea99e4e518dab167b47fe03da126e2e49d3fdd38586
-
SHA512
f964a47ea0fcdcbe82aae25875df350f5182b2289caad3eee32f2beff846d328947dafa0ba671f217d6ec4705c6545faadc5fbb8847bb60f979ea20b4631e146
-
SSDEEP
96:ONGwuDm6rpIeGdBp49zGbosib2NpZzB163IfMJEwY:FSgIrdBgz6oVb2JzB1qCMiwY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 124139ec2f9a7795410a88c8923158dc_JaffaCakes118
Files
-
124139ec2f9a7795410a88c8923158dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
0afa1e0cc3180d6deffbab913ac3a419
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
msvbvm60
ord690
Sections
pec1 Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE