Static task
static1
Behavioral task
behavioral1
Sample
484bd977a641d98bb725b1495d9a3589_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
484bd977a641d98bb725b1495d9a3589_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
484bd977a641d98bb725b1495d9a3589_JaffaCakes118
-
Size
948KB
-
MD5
484bd977a641d98bb725b1495d9a3589
-
SHA1
6b0a155fd0b6845640d69f4188a1bbed2dc41255
-
SHA256
731d3fa376a877fdd9e5e9243794b435b3321a9e5137a3f97a6da212266fa5c0
-
SHA512
85f3cd857ed3a830dd29390c5d1bed131afa699005ba3d28733abd6d4c44301b3c086364ce4b629b1e58e6b8bad5b87029fdefb7fb637bd33dab9c0804b409eb
-
SSDEEP
3072:Qmahu58fJYCh/MyqSzcoIvqbMnM8H9GqtnnMUTSPb/g/J/h5uVTr:Tahu5ivzceAnMk9paz/g/J/v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 484bd977a641d98bb725b1495d9a3589_JaffaCakes118
Files
-
484bd977a641d98bb725b1495d9a3589_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 939KB - Virtual size: 938KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE