Static task
static1
Behavioral task
behavioral1
Sample
4b3516720515cc536c46efa6433c6308_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4b3516720515cc536c46efa6433c6308_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b3516720515cc536c46efa6433c6308_JaffaCakes118
-
Size
15KB
-
MD5
4b3516720515cc536c46efa6433c6308
-
SHA1
20f9c9731f7848a04ed042cd667da02cac8e09e4
-
SHA256
9e4520136a83ee139a0bf22dd5df2556458affcc2185d5d8cbb85304e3fd09e3
-
SHA512
aac90bbdef2a16f0c5a14c76ba09a9e27d081366255e9e53a6875bc67cb8f0bb511f94ad1f87d4be65b723f83d54640a4a8388c9f19f5dea7d0cd7c7be82d568
-
SSDEEP
192:n3NEcoviu6QiT//vDOnfzBkCOVOzt/ZLMl5SnvFbhzGxPC8JzzfMu9Oj5PzeuCZ5:3oeHvOGXcztV1dbVGHv0NliuPUKRly
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b3516720515cc536c46efa6433c6308_JaffaCakes118
Files
-
4b3516720515cc536c46efa6433c6308_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 576B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE