Static task
static1
Behavioral task
behavioral1
Sample
4697ec7d0f12404b4157000b12bd85c1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4697ec7d0f12404b4157000b12bd85c1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4697ec7d0f12404b4157000b12bd85c1_JaffaCakes118
-
Size
23KB
-
MD5
4697ec7d0f12404b4157000b12bd85c1
-
SHA1
faa1b3c44ea713cd79d41c3a9d8487d12a0eaabf
-
SHA256
15b05636da2f3d4d57971bffc6b5b200f8248dcfcfe171d109aaaf6781046407
-
SHA512
248afafef34e59ff92be93c637ad2ce2dd3cb18d2aa5376ea86ddcc7c52219f69c5cb8fc5026c302f345adb0ba36743fb0b00b0cdb794cc2f4305c2beea1e582
-
SSDEEP
384:k75jMuZ63U5MJSKLocV7SMU//4qEl3rHOuNB22ZiPqJtAQH4NRst6r:kOuZQ7Lo8RU//4qE5bOuNhkeAQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4697ec7d0f12404b4157000b12bd85c1_JaffaCakes118
Files
-
4697ec7d0f12404b4157000b12bd85c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
faaa31c89bf1c22add6ae95b8821c960
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
lstrlenA
FreeLibrary
lstrcatA
GetProcAddress
msvcrt
_strdup
strlen
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 498B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.MaskPE Size: 512B - Virtual size: 128B
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ