Static task
static1
Behavioral task
behavioral1
Sample
edf49439b4c5371c82abf7fdba4b2f93_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
edf49439b4c5371c82abf7fdba4b2f93_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
edf49439b4c5371c82abf7fdba4b2f93_JaffaCakes118
-
Size
75KB
-
MD5
edf49439b4c5371c82abf7fdba4b2f93
-
SHA1
54d7fc045982550e6be4e181a0b0e29a88ec41e6
-
SHA256
f118f751f2a78abc7672ef30d14dd7eb4852a6d22a376d5494ca5a5e2c9c4f83
-
SHA512
65581e5ee4f550fd0e6aceb49c693d848a743b27ffb13a2270f8788f7220116825e1ae9308353b9a623fa697dfbefed2ce87d92d16d74d1b13515e6f6ace9242
-
SSDEEP
1536:yKZOlYo+vHjsEz8PB78jn9bIRD4+7Z9Kebf8Yu9gmOTQSFEuGYnaRd:LZtHLsaQ78L9bVcvbfMJOTQS64av
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource edf49439b4c5371c82abf7fdba4b2f93_JaffaCakes118
Files
-
edf49439b4c5371c82abf7fdba4b2f93_JaffaCakes118.exe windows:4 windows x86 arch:x86
827ae9e92f0226e668e5b65613328163
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
ws2_32
inet_addr
Sections
.das4 Size: - Virtual size: 428KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.das4 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE