Static task
static1
Behavioral task
behavioral1
Sample
447383e74c55c06ee103159b07e2893c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
447383e74c55c06ee103159b07e2893c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
447383e74c55c06ee103159b07e2893c_JaffaCakes118
-
Size
456KB
-
MD5
447383e74c55c06ee103159b07e2893c
-
SHA1
af1b26032d3e6b0afe5c81f924e51ab1986d6e9a
-
SHA256
0e30c4bee1006a158a215617257e860660b6aac8f15cbbd738d447f42d4aa5ce
-
SHA512
d18a3bc4ba017e865c1de4fb42376b36e0da642c610baba576bca2b19892d21beca82d76b7ecb5b2b3c65fb3a513b7cd1fb99613f8449ce836de8dea1b7586d3
-
SSDEEP
12288:sSJ+fsUUfR5zTrAuyJ017OBU2DemPhgXdmo:s1sH3C017OBUEH0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 447383e74c55c06ee103159b07e2893c_JaffaCakes118
Files
-
447383e74c55c06ee103159b07e2893c_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 440KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE