Static task
static1
Behavioral task
behavioral1
Sample
4b3beee9f8890dd301334784bfbf5834_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4b3beee9f8890dd301334784bfbf5834_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b3beee9f8890dd301334784bfbf5834_JaffaCakes118
-
Size
128KB
-
MD5
4b3beee9f8890dd301334784bfbf5834
-
SHA1
a10f7c4b33a6e147b9fb3319f890104791fe02fd
-
SHA256
15950a4ef16117344b2157dc2d086574346d519b5380745c9a7b344c0d310a2d
-
SHA512
e389090f5174c8a5bdaa2d2f5b8f0b867a23b1f0d0137a1fe70c3d01e5dd816377f33d01d4daa2f88ad363b95b7b82450c10500809976b7fa29e7e8776f9e4e8
-
SSDEEP
1536:KtLUVEyAg985eO8MlywVm5gtE1t4F8iIwjltq7nYO2zvTsHgNRC6D0NmfF5XosdI:Kt4Ek98rWg24IEQ2vECDbfnHfnK8gEe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b3beee9f8890dd301334784bfbf5834_JaffaCakes118
Files
-
4b3beee9f8890dd301334784bfbf5834_JaffaCakes118.exe windows:4 windows x86 arch:x86
2b221e1576750deb7fd25911a1bcd766
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
GetConsoleMode
WriteTapemark
ProcessIdToSessionId
ReadFile
FlushFileBuffers
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
icode Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
idata Size: - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ