Static task
static1
Behavioral task
behavioral1
Sample
455551a255e3307c486990f38c960099_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
455551a255e3307c486990f38c960099_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
455551a255e3307c486990f38c960099_JaffaCakes118
-
Size
262KB
-
MD5
455551a255e3307c486990f38c960099
-
SHA1
d42632ef2814b686196830cc586a2d11ecd79d99
-
SHA256
7315f00ca9d7974a48af2aa13d01dce67af057544cf976754e219302ec335018
-
SHA512
5862bc9853e09588008ac10be15dc3181ae2b2245639e75c6c3c5b8e7cff808a0f3eee6976969295ff986463cad5b348b4debb92111667c2b98234fc2a0eee99
-
SSDEEP
6144:8o0XtsRQpL9yr/KrffeI6BDWh7gexqjR56cBXY2+EZHcdnmjpU8NfK4g1u4h:88RQzrOIrgeE/6cq2dZHcnm285Yu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 455551a255e3307c486990f38c960099_JaffaCakes118
Files
-
455551a255e3307c486990f38c960099_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
Size: 249KB - Virtual size: 700KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE