Static task
static1
Behavioral task
behavioral1
Sample
4b9621b5d751dba8dc42cd44a90dabad_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4b9621b5d751dba8dc42cd44a90dabad_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b9621b5d751dba8dc42cd44a90dabad_JaffaCakes118
-
Size
235KB
-
MD5
4b9621b5d751dba8dc42cd44a90dabad
-
SHA1
166b19fb920d1858a8e6e2d14802c4ad7ecc71b1
-
SHA256
f3b72951832d3f8f9ef07febc7b2911329f5a77d3fe9d581b6851e6d138d03c8
-
SHA512
a2af10c50f257528ce0c378abfcb32bbaa2ca36a2fb8b4668a7a42ca558d74e9b6eb0dca5f0186ec1ee8af1d52c1921e477a02f3ba86f570a80d513e0c528b25
-
SSDEEP
6144:XwM40Z150OZ8QJpnFIXMy2GeWhx8/FCzQW2/aUvj:XwM40Z150s8QJ5FOMg2/FCzQzrvj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b9621b5d751dba8dc42cd44a90dabad_JaffaCakes118
Files
-
4b9621b5d751dba8dc42cd44a90dabad_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 225KB - Virtual size: 496KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE