Static task
static1
Behavioral task
behavioral1
Sample
4775bab1527077af325cacc8dd859fb4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4775bab1527077af325cacc8dd859fb4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4775bab1527077af325cacc8dd859fb4_JaffaCakes118
-
Size
73KB
-
MD5
4775bab1527077af325cacc8dd859fb4
-
SHA1
06eb5a9d199de7454619d2e829ec2add20b29186
-
SHA256
019772b32290fd97363da91113fb74a3850bbe42909d7ca144764667509f1a92
-
SHA512
8c352038c4a880b80a136e9f4e5a2dbb766567f45a32ee135c19dc70dab56c4c757a6e99a3a14ed0b23cc41570d3776cc0b7dca0e2095c08aa7a82ce17dc5c88
-
SSDEEP
1536:I5sc375Ab4EBanICQFuIiyd6gWHpkeaPRAERU4AfayRgM+/vtQr6dbL:Ip5wfCQF92HpkeWpClfau+/FZdv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4775bab1527077af325cacc8dd859fb4_JaffaCakes118
Files
-
4775bab1527077af325cacc8dd859fb4_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 42KB - Virtual size: 476KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE