Static task
static1
Behavioral task
behavioral1
Sample
13400e3c27483f95eb71b1c898a11998_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
13400e3c27483f95eb71b1c898a11998_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
13400e3c27483f95eb71b1c898a11998_JaffaCakes118
-
Size
926KB
-
MD5
13400e3c27483f95eb71b1c898a11998
-
SHA1
6d99463b9321b9cc84bbe42edf4b75af972d77bd
-
SHA256
1f75e73c1d2ccf13f2f7dd258e8382a0c293fe8cad1a52d7f395e7bd28c3c1f0
-
SHA512
3663c6278a5098c1cf0b021df617e99e74408dc1f97e17c9d62147dab83f003b2a39ada8774139d331f3142f040dca921430d006e63fde646ea9fbcbeb95f280
-
SSDEEP
3072:mQvyNsvGJJbzf2oQefcZUh5rcZUh50kQ4BjE06XSkWdi1v1ZMpNgv:mQqN8GJMoqUbcUb0kQq2XVWAp1ZYW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13400e3c27483f95eb71b1c898a11998_JaffaCakes118
Files
-
13400e3c27483f95eb71b1c898a11998_JaffaCakes118.exe windows:4 windows x86 arch:x86
d436c55cc61e4d62b21359ff12be3c38
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
MethCallEngine
Sections
.text Size: 675KB - Virtual size: 940KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 251KB - Virtual size: 279KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE