Static task
static1
Behavioral task
behavioral1
Sample
4071d7e2412705ae756e75ac515a5d73_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4071d7e2412705ae756e75ac515a5d73_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4071d7e2412705ae756e75ac515a5d73_JaffaCakes118
-
Size
150KB
-
MD5
4071d7e2412705ae756e75ac515a5d73
-
SHA1
8b7825a1777bc76710b52ba156285d2f3c09e105
-
SHA256
48a3741c019c431234441fb91d8a1cde9192edd70f3f4b3e8ac7ca9fe4fad4f2
-
SHA512
7a4e9deaccd8a3daef8bca9aa299a60d7251982a327dac29a84148dd0ad6b012b97c4625e29112b029775e3b59d705e3001c05d4894092a74e453b3eb4cd49d5
-
SSDEEP
3072:/VhUTNt0TSmLGkhjKXFvIGk6H0ydpZTr5iSTNL9cEVz3CiODcRwZT:dkt0TSZkhWVvI+UupZTr5iSVrLmca
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4071d7e2412705ae756e75ac515a5d73_JaffaCakes118
Files
-
4071d7e2412705ae756e75ac515a5d73_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 140KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE