Static task
static1
Behavioral task
behavioral1
Sample
4bc5c58a54748ba676bf785146449315_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4bc5c58a54748ba676bf785146449315_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4bc5c58a54748ba676bf785146449315_JaffaCakes118
-
Size
8KB
-
MD5
4bc5c58a54748ba676bf785146449315
-
SHA1
24e3bfdca4cdeeb84ce6d2ac5c3789413550954a
-
SHA256
1359778ae1437e81c9c80fbe2c76d29e0d91af3d681a72469fdd47b5a21fdcd3
-
SHA512
6a8e9dc370f46e24955b6e41bc5300d74813a38d18f09eb946d5c371516a4d4c2ec02937f67f918e7d7e6ab36ab0bf05ddb1502641f6276208c5851b51deec38
-
SSDEEP
192:kBhaYq13j9TEMIEW2+Kt2bF/3ymgNjFCP:kBh923jKnkGZ/3s/+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bc5c58a54748ba676bf785146449315_JaffaCakes118
Files
-
4bc5c58a54748ba676bf785146449315_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 80B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE