Static task
static1
Behavioral task
behavioral1
Sample
161bf2d2db09707e80885fd9edd98d99_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
161bf2d2db09707e80885fd9edd98d99_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
161bf2d2db09707e80885fd9edd98d99_JaffaCakes118
-
Size
20KB
-
MD5
161bf2d2db09707e80885fd9edd98d99
-
SHA1
822065e6155f00a3f5b1511f5eedd1e5428566d9
-
SHA256
01a354fcc0f6f95ce95c0d463f5217ddf5ade729f039d6e821649e0ab1f0d69e
-
SHA512
e8df0f76397ae95d877c384bbf331ad6bfba317539c62db62c73daaad85025a1544b5a40d2bc3e1e061bb294a4e6bda83a253bc9391a88bc3eee9ffa0aa91743
-
SSDEEP
384:u4AExORFp/bS/kw+5nCXcMOQdQAi8SeeTjwfHmbfl45JvFEPC7mqBlDm+j:PAYivRnoOTAiv1TjwfHmOJ+C6qBli+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 161bf2d2db09707e80885fd9edd98d99_JaffaCakes118
Files
-
161bf2d2db09707e80885fd9edd98d99_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 17KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE