Static task
static1
Behavioral task
behavioral1
Sample
4806df83b7a26f0d07bec506eed1d57e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4806df83b7a26f0d07bec506eed1d57e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4806df83b7a26f0d07bec506eed1d57e_JaffaCakes118
-
Size
324KB
-
MD5
4806df83b7a26f0d07bec506eed1d57e
-
SHA1
8a321ba4c1df2ff08788ce617422f7035a8bbfd2
-
SHA256
94627fb879fc5595a79a11494de413e5900e898e20665152f8ae09d79ea5592a
-
SHA512
f920a2b30fecc9b11175cd9c707ebc27a45d032ce2f5a54bbf391b8969946c51f305212e495083c804f303ef8e459b008100401012681745129925c2d6f5b8a4
-
SSDEEP
6144:Blt0O4O5MzEKbphbw+qEhssI4K9MU3Sh8kiE4zYfXPdejWquTjI+xNMDZ:PKO4FEKbbphsqUtSh8kiEeYEjWrXpxNI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4806df83b7a26f0d07bec506eed1d57e_JaffaCakes118
Files
-
4806df83b7a26f0d07bec506eed1d57e_JaffaCakes118.exe windows:4 windows x86 arch:x86
371911b227edbe7096336cc847f8ecad
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
CreateFileMappingA
lstrlenA
shell32
ShellExecuteA
Sections
0 Size: - Virtual size: 728KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 279KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 532B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ldut Size: 495B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1212 Size: 100B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lame Size: 27B - Virtual size: 27B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ