Static task
static1
Behavioral task
behavioral1
Sample
274f9ec142858be78f7d0d6f0ab2a393_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
274f9ec142858be78f7d0d6f0ab2a393_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
274f9ec142858be78f7d0d6f0ab2a393_JaffaCakes118
-
Size
92KB
-
MD5
274f9ec142858be78f7d0d6f0ab2a393
-
SHA1
6c9bc51b58f4f88968523e1fee02dcedebe6ad1a
-
SHA256
e43c8285b3130ce80e0c27157d733a9cd5e4483fe8cb43d6e7a92d1c14304f0b
-
SHA512
130dc8937a79f4780a160cdfcbdb99c8605a20bb12c538519b4c5ad6f7f64ace1954163700886ada2d4a097ad5ff20cf59e9c9a076d0a160235f06722f6e711b
-
SSDEEP
1536:D6Dp7laAhT32SatPDkB3qXnxonPVD1XZ9gs30gzR1TnFB6+Copf:uDNIAh6bDI63xonV1XXN3LnT6M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 274f9ec142858be78f7d0d6f0ab2a393_JaffaCakes118
Files
-
274f9ec142858be78f7d0d6f0ab2a393_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 90KB - Virtual size: 520KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE