Static task
static1
Behavioral task
behavioral1
Sample
1682b37a75390fe5d62711215722c99f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1682b37a75390fe5d62711215722c99f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1682b37a75390fe5d62711215722c99f_JaffaCakes118
-
Size
31KB
-
MD5
1682b37a75390fe5d62711215722c99f
-
SHA1
8c1e124f48a693b04903c35436c8a1cd7f30ccc1
-
SHA256
e40dd4d1b01b4d7779a1d5c221d7df6b801c7ba4c1a17df36e5854700c0a0f8c
-
SHA512
fc7eebae861bf208c987364898f4fa4eb35383b429574fad67e86af0900be01d7a2d5771119a43bfda06863c44ddb79340bff1584e31faae8ca76efabe0c05b4
-
SSDEEP
768:Zxl7zoEG2oLHoKaALcvrq5j4o2nNF7Ezz:Tl39BiIQBj4oeNBE3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1682b37a75390fe5d62711215722c99f_JaffaCakes118
Files
-
1682b37a75390fe5d62711215722c99f_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 26KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE