Static task
static1
Behavioral task
behavioral1
Sample
47286aab501ff5dd60470f61d235d33d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
47286aab501ff5dd60470f61d235d33d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47286aab501ff5dd60470f61d235d33d_JaffaCakes118
-
Size
67KB
-
MD5
47286aab501ff5dd60470f61d235d33d
-
SHA1
404c3a51da8024e1895d76f5409a2a709f879741
-
SHA256
bc90c89747fe852dd210f4a1d8a08253648dfcb7008bdd88005ffc5f1246668f
-
SHA512
134e8ca0965fdd82ce399935f7f7c3f7540ffe685a54670affc56c4960106ab29c2f1ad00259e295b87aca1d02df5f96436108d6e1dbf9349cafd87ce02ebc2c
-
SSDEEP
1536:YuHBOqDdUwC2AVH+wSxPDsUnKntZ+EWAnTj42LoFLMBe:HLJ8FhL+rkeM4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47286aab501ff5dd60470f61d235d33d_JaffaCakes118
Files
-
47286aab501ff5dd60470f61d235d33d_JaffaCakes118.exe windows:4 windows x86 arch:x86
c0ca8fb524d53a294a75f3adfde9e816
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA
user32
MessageBoxA
Sections
..... Size: - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
...... Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
....... Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_rsc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ