Static task
static1
Behavioral task
behavioral1
Sample
477a79c67aeca56088f4cf67ccf3e15c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
477a79c67aeca56088f4cf67ccf3e15c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
477a79c67aeca56088f4cf67ccf3e15c_JaffaCakes118
-
Size
446KB
-
MD5
477a79c67aeca56088f4cf67ccf3e15c
-
SHA1
c524c987c5bbcdd69597e5d83404d98ed3fa2cfa
-
SHA256
143622b53ce65cc2ebb154a0dc3d505b8cc8feee154d8fa636fb7bb30d9479cd
-
SHA512
e9cdc0169cf4b8b943f325261eb8ed1418dac09278f730ef09c76df7f692a3fffd6b71d5cc29743cc3a18428e4fc2b7892a7336b20ce8e7fae8f8dc18137f92e
-
SSDEEP
12288:WfvJC1qbahmBhPtai1LIZ8rbsw2Uvja5C1enVwX61/:cBCwa8eiYibIC1PX6h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 477a79c67aeca56088f4cf67ccf3e15c_JaffaCakes118
Files
-
477a79c67aeca56088f4cf67ccf3e15c_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 46KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE