Static task
static1
Behavioral task
behavioral1
Sample
4bbc807b7d18bd9bb9f0cd2e42a2593c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4bbc807b7d18bd9bb9f0cd2e42a2593c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4bbc807b7d18bd9bb9f0cd2e42a2593c_JaffaCakes118
-
Size
216KB
-
MD5
4bbc807b7d18bd9bb9f0cd2e42a2593c
-
SHA1
1b5fd93c762ac7084a5d6fe5e7218c0a74db2429
-
SHA256
1a4283e8b90ac5ca0513bf0464c5bbb1c12cd6ffa9a4c26a8338bf7242581f5f
-
SHA512
4743fbc47cd01122a1ef1e92409514627e6f93d37fd2b0b58c9909dafcd7f74927834459431f357eaab0db309b609fcde5d2a7f6bcf7a709634c4ae68504f665
-
SSDEEP
3072:uHQUSPBW4ycjCiGAt2a8KMl4IcFLAi0whiHQteKcj4IFkRxZMAuU8F:8QnPBdyc3Gu1MmIcCRwhPaFkFT8F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bbc807b7d18bd9bb9f0cd2e42a2593c_JaffaCakes118
Files
-
4bbc807b7d18bd9bb9f0cd2e42a2593c_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
.text Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 804B - Virtual size: 804B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 544B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ