Static task
static1
Behavioral task
behavioral1
Sample
1769413bfdea11a4eb2a12ea0ed80474_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1769413bfdea11a4eb2a12ea0ed80474_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1769413bfdea11a4eb2a12ea0ed80474_JaffaCakes118
-
Size
63KB
-
MD5
1769413bfdea11a4eb2a12ea0ed80474
-
SHA1
4578a94e414fb81fbe397773f7943c4a99877870
-
SHA256
7f210e1157827a3cf29063a1d7c2ad075a2da0572fe099496a41543ecdb4a3f2
-
SHA512
f93846595ba2b060bc2a7758a4ec410e225e567a9e0e8fe4cbd9f89d35ec62a291c7b6e0c9d94f287a8d385d13c4ef57ee2b607964168cf1ae91e7420e52a74d
-
SSDEEP
1536:JY/BPfMd00T/ybHIaf7NVzIkQQ4841hAKFhbegIOpTXJBbP1feziJeMx/:JsBsHT/GIc/U8wesReROZJBb1f28/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1769413bfdea11a4eb2a12ea0ed80474_JaffaCakes118
Files
-
1769413bfdea11a4eb2a12ea0ed80474_JaffaCakes118.exe windows:4 windows x86 arch:x86
4c0c4f68eff15cf5001f6952dc85cb0c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
VirtualAlloc
VirtualProtect
VirtualFree
ws2_32
socket
Sections
.df4 Size: - Virtual size: 380KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.df4 Size: 62KB - Virtual size: 64KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE