Static task
static1
Behavioral task
behavioral1
Sample
57083ac3cd72eaff96fb55245a415c65_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
57083ac3cd72eaff96fb55245a415c65_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
57083ac3cd72eaff96fb55245a415c65_JaffaCakes118
-
Size
403KB
-
MD5
57083ac3cd72eaff96fb55245a415c65
-
SHA1
95f3d2c6afa96f97d5d2cb6140fb32a9f29568db
-
SHA256
8b770c79e5a6b7ab7b16e8fc42000c724b18b5b92351f47c446e21b8a037f899
-
SHA512
b39eccf7089dc27ca048286ac13436b213720b51eb6092d918cbe759accae48c4f6259e6b597c26b79cadc7ddf8a986ed3fa667b091cc9038535f664cae00e1b
-
SSDEEP
6144:iKnmu4tRr6TXFDxrwaFFlWcEMZ7pFnRlyTf7OoWWFwy8K+UcdHyyM5rPO5OfvKWn:HmtqBDq4XVfyf7OoTFRcVALlXVUBKP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57083ac3cd72eaff96fb55245a415c65_JaffaCakes118
Files
-
57083ac3cd72eaff96fb55245a415c65_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 377KB - Virtual size: 480KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE