Static task
static1
Behavioral task
behavioral1
Sample
480e21481513988995ac0065d4d78c77_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
480e21481513988995ac0065d4d78c77_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
480e21481513988995ac0065d4d78c77_JaffaCakes118
-
Size
848KB
-
MD5
480e21481513988995ac0065d4d78c77
-
SHA1
d49694ed22212f4ed6272c98e5593e3fec78d046
-
SHA256
6d51885eb1af824487b5c89b552639d556c2539706cb5ddf6f52e1b742effa2f
-
SHA512
32f11742e4d4ced24b6f1883c25b89daeadfd21963a30258cf255d00a26d99b3f1d2a2dfb8021eae45a4ec842d39b974d8471d042016758f76111ad2f7638b0c
-
SSDEEP
12288:ujq3ZMYYxG/jyKZxHEYEca4KQ3eFSNnXh6tJFAS8MJp9xySab:ujq+fG/tZJEYZQQ3/nusqDfa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 480e21481513988995ac0065d4d78c77_JaffaCakes118
Files
-
480e21481513988995ac0065d4d78c77_JaffaCakes118.exe windows:1 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
CODE Size: 393KB - Virtual size: 393KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
. Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 370KB - Virtual size: 370KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE