Static task
static1
Behavioral task
behavioral1
Sample
471c74c011b3d0c490c391d499747013_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
471c74c011b3d0c490c391d499747013_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
471c74c011b3d0c490c391d499747013_JaffaCakes118
-
Size
12KB
-
MD5
471c74c011b3d0c490c391d499747013
-
SHA1
69fa00a2ae8b8aaad421e579654aaddc0783ec0d
-
SHA256
1f5789511f133c3a833c013def06f3f178039ec471da2b063d60f869ad3204eb
-
SHA512
9c557d8b96d7a5f26500dee46b26d9c5e1fcf406669a0816a2bedd5aa0d9695020740ba4f084254d08d26e4e3796b1619c717a1493c18326d58612a023d73d10
-
SSDEEP
192:/T56+udQg6oRwZRKSK2ISmQcvcUBROFz5XCT2NyVrNdDiLs5Avh:/T5ikQ3vcUrOFz5wWyVrNJcv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 471c74c011b3d0c490c391d499747013_JaffaCakes118
Files
-
471c74c011b3d0c490c391d499747013_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 5KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE