Static task
static1
Behavioral task
behavioral1
Sample
4b52e51ca6ba7ebca149f40104b80c6f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4b52e51ca6ba7ebca149f40104b80c6f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b52e51ca6ba7ebca149f40104b80c6f_JaffaCakes118
-
Size
226KB
-
MD5
4b52e51ca6ba7ebca149f40104b80c6f
-
SHA1
7d441c9e6b8e788f84071882bb6335bdb9c29cae
-
SHA256
3eecc42a346b843dcfa4983867cb74368283b08eb5e69ff6bae8a620ea0b166a
-
SHA512
3d1723dc2e8c66a04dc63bc8327de77bd9ddb1e21fe3f9fb6bd4f3b932fcdde83a4cfc9ec5e6911b584b755b6a155529d46867198b1fb2e5bac86af31c7b7825
-
SSDEEP
6144:eCtHQdx2mwzKq2JE65uSaVKUFaeuGN4jOi:eCHQdxmzN2GsuSWzFac4ii
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b52e51ca6ba7ebca149f40104b80c6f_JaffaCakes118
Files
-
4b52e51ca6ba7ebca149f40104b80c6f_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 201KB - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE