Static task
static1
Behavioral task
behavioral1
Sample
4792020f6c5f4f91edee333feb895648_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4792020f6c5f4f91edee333feb895648_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4792020f6c5f4f91edee333feb895648_JaffaCakes118
-
Size
25KB
-
MD5
4792020f6c5f4f91edee333feb895648
-
SHA1
e108383bc82d39ed9714ded02fc73f8bf6cbb138
-
SHA256
9dea21c5f0f03d4a71e635e463f954fa5b14692c92823deffa363abc3fb71f20
-
SHA512
613f5de2df7523cb871dd1169dfd3d2715fb4189e408742eefba9fd41d41901854b84ad32e170623c129b239e836acbd07143bc0670631fefc8aa075b41c6173
-
SSDEEP
768:2XKseSuhkp+9nmnOMudzAsI86IpqpWvbrD1TH56T:8eSY9mnOhysFKpKbdV6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4792020f6c5f4f91edee333feb895648_JaffaCakes118
Files
-
4792020f6c5f4f91edee333feb895648_JaffaCakes118.exe windows:4 windows x86 arch:x86
ea45573f7fc4c206bc74b2a17e4f92d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
LoadLibraryA
GetProcAddress
GetModuleHandleA
VirtualAlloc
FreeLibrary
GetCommandLineA
GetEnvironmentStringsA
ExitProcess
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ