Static task
static1
Behavioral task
behavioral1
Sample
4027df98ca88a6e6b99a9e6a8e4a659d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4027df98ca88a6e6b99a9e6a8e4a659d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4027df98ca88a6e6b99a9e6a8e4a659d_JaffaCakes118
-
Size
47KB
-
MD5
4027df98ca88a6e6b99a9e6a8e4a659d
-
SHA1
d7de03577000cca76ff24759e06b6545f457a872
-
SHA256
0acc697ac77c8d23e49337520ccaf3757ef1b677bd5811820e45c9780efb36ec
-
SHA512
994b7d6f158183a27d9ab996fa147e2446282f63729b5ee271d31e836e2e8ee32cd5cbeabb14de147215dfea814633e5fc93e35aaf67d9356f4f6bc27ed04a44
-
SSDEEP
768:K5scsxI71Hv2mTEb4YXVzancAloPCx+k2uIuHtod6gWtxVjkeaPnAJWAEnRmtl:K5sc375Ab4EBanICQFuIiyd6gWHpkea5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4027df98ca88a6e6b99a9e6a8e4a659d_JaffaCakes118
Files
-
4027df98ca88a6e6b99a9e6a8e4a659d_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 42KB - Virtual size: 476KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE