Static task
static1
Behavioral task
behavioral1
Sample
56e6f599eb8960d0079d27794506e1ce_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
56e6f599eb8960d0079d27794506e1ce_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
56e6f599eb8960d0079d27794506e1ce_JaffaCakes118
-
Size
85KB
-
MD5
56e6f599eb8960d0079d27794506e1ce
-
SHA1
168565199f9e7095b121c8370f4036ee1a1e9c2c
-
SHA256
ee15f9530c3600c1d5e2292102638253edc40e524256a2bc1bf1f5c146f94ef7
-
SHA512
35a248ce23c36edc37f46b2ebd5ecbfce55ed37bfe8d57eaf03e4f2bda4dd869fe53ff1b8c83aa5d52353e6ff9f4d29b4dec9278af498c9e6fc7cad3c172b0cb
-
SSDEEP
1536:cuQweKUL1MOMVujKGu6xF3kSMDHLuXv2ZYPZ1Fdl3b7ACfgb4TLZYpaOxz1:cuXchMVaKGtxlkVry+uPCCfKF0Ov
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56e6f599eb8960d0079d27794506e1ce_JaffaCakes118
Files
-
56e6f599eb8960d0079d27794506e1ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 82KB - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE