Static task
static1
Behavioral task
behavioral1
Sample
4146ac983beefe266c7ffe5b16530f2c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4146ac983beefe266c7ffe5b16530f2c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4146ac983beefe266c7ffe5b16530f2c_JaffaCakes118
-
Size
13KB
-
MD5
4146ac983beefe266c7ffe5b16530f2c
-
SHA1
006cfca2b1b7dc56d3e9c9288f28936f66592ef9
-
SHA256
f12c314898173b5ad2bbd1d49853ca67a386508b611178b27a9912998d1c5f96
-
SHA512
b70225ab2a3afc9fc56ffecb8a485fce09b25d441505fb87508420a8c27ebf5fdfbfd6a3176f9fefb2b9e9dbf62ad1683a2ddd1014aa0d7b4fb49e3f21a5f916
-
SSDEEP
192:nGIlgn1IeV5uUuArTiHKBWDkJBGNJE1LYZf0lSZtkNobQO:3lgn1I4uPAr6KBWAJYAYOlekO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4146ac983beefe266c7ffe5b16530f2c_JaffaCakes118
Files
-
4146ac983beefe266c7ffe5b16530f2c_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 9KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE