Static task
static1
Behavioral task
behavioral1
Sample
4a64d1fa827049f83fad4bfea08dd654_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4a64d1fa827049f83fad4bfea08dd654_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a64d1fa827049f83fad4bfea08dd654_JaffaCakes118
-
Size
38KB
-
MD5
4a64d1fa827049f83fad4bfea08dd654
-
SHA1
7cfdc85918a40cd5ada0804e2b8500f288a73d57
-
SHA256
c8387a2041151d84aeca4b28b0fc22fdb10884b8dea29e373841dd7fb80c5138
-
SHA512
cb51c6ce1778c0f0008cdac6258c1dec942b00cbc0f761c87c1cfc668fe9015a27ffff3ec70c7c0917f1f9f3b587e3437e3e8a0d4e4dd8413212dececc6cd58b
-
SSDEEP
768:chRkgYEzEVVgW7zLo2qwfnhDw/BWaSRVQrEoZCgnthdGkAL:cHkozEV2W7zLZqMlw43Rufcehs1L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a64d1fa827049f83fad4bfea08dd654_JaffaCakes118
Files
-
4a64d1fa827049f83fad4bfea08dd654_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE