Static task
static1
Behavioral task
behavioral1
Sample
453e3fcc3dc4000e37c37db826a4bc98_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
453e3fcc3dc4000e37c37db826a4bc98_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
453e3fcc3dc4000e37c37db826a4bc98_JaffaCakes118
-
Size
16KB
-
MD5
453e3fcc3dc4000e37c37db826a4bc98
-
SHA1
f3b0abfe69cb9ca2b4e8aad71967f55e147f34ca
-
SHA256
6755f7b131bf7be4728db88ad105be69ee382b8fceae57e2c77e26bde665d551
-
SHA512
161e7e17bcc0e6fddcf76b54c40264840d084825f035e79f4b5f176e4a9ec2f5af3f681e2062bc3ace68104a3755c4944aa8e98af8958b00bc7893b8e9faa2b2
-
SSDEEP
192:35HoWf+/kea3x3f1St2aIGenypl3J0SyVQ72B0dh59IGv0sj+Noj76d4yEhsTCR0:35aceaBt1gpVxOITKcCm3hsTop9VG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 453e3fcc3dc4000e37c37db826a4bc98_JaffaCakes118
Files
-
453e3fcc3dc4000e37c37db826a4bc98_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 12KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE