Static task
static1
Behavioral task
behavioral1
Sample
4bd3217d91a12d3be5349bd885405db9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4bd3217d91a12d3be5349bd885405db9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4bd3217d91a12d3be5349bd885405db9_JaffaCakes118
-
Size
188KB
-
MD5
4bd3217d91a12d3be5349bd885405db9
-
SHA1
9c5c23f044c9f393f4f17e3fcbf5863e0f6c2801
-
SHA256
8718c5633bead4dc385fecb6d00b37adb02297425a86dd06525e7dd3755721f2
-
SHA512
c0a03680e43193618651029f258d16c8946302dc6a973c44f2744f1780611c05545c61b6943152cafe7818c02f9d9c87268260c38f925c41c04c8e9937031a95
-
SSDEEP
3072:524WFT68R+PnPbJvyO55dtuJ8sCTp1o2b3iKmpWNBXJKEAH1IKr2knADevZCPTrC:bWu8RaPbgOrQApm2cWNBXqVIa2k8evZL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bd3217d91a12d3be5349bd885405db9_JaffaCakes118
Files
-
4bd3217d91a12d3be5349bd885405db9_JaffaCakes118.exe windows:4 windows x86 arch:x86
99fc69d43b9cd9fe874a0947318e4eef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
TerminateProcess
OpenProcess
GetProcAddress
LoadLibraryA
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rawdat Size: 173KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE