Static task
static1
Behavioral task
behavioral1
Sample
495f3af0810d22fe351ee7a45c50286d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
495f3af0810d22fe351ee7a45c50286d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
495f3af0810d22fe351ee7a45c50286d_JaffaCakes118
-
Size
33KB
-
MD5
495f3af0810d22fe351ee7a45c50286d
-
SHA1
e43ac631a9928173647b193cd6196227d7a3beec
-
SHA256
4a9b05add06c945fcbcafb8fd399a4e688a815160a459b21f81824b422779837
-
SHA512
12ad8baf9cd2275f47be7f35dc2fbf671d088ac69f63c6ca69688e3372975efb526aa9525c0eec1d935045ccd13cbbbeaee09ad155fc25bde5bebc468fb786dd
-
SSDEEP
384:wXANnluzDLCbCosT+MSXT0gH8lu8uHpSSRAIdka1ZZ24B4XP4W6CbsHiieNziJqK:NNlPj2VSD0gH8z0gIe4kbsClESd20w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 495f3af0810d22fe351ee7a45c50286d_JaffaCakes118
Files
-
495f3af0810d22fe351ee7a45c50286d_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE