Static task
static1
Behavioral task
behavioral1
Sample
4b63d422beaf4707700f7b72623cb424_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4b63d422beaf4707700f7b72623cb424_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b63d422beaf4707700f7b72623cb424_JaffaCakes118
-
Size
165KB
-
MD5
4b63d422beaf4707700f7b72623cb424
-
SHA1
9c6475603783e6c57f21a42bbaf07f7dc13be762
-
SHA256
1dafa390fca8deebeacacbff49334329d71b27ef0deda59a37ce6a2a74b0d4c5
-
SHA512
f9c91c63934ecf5017b3379bcde5f7abba480868885f07cbe51a0ea52c523a74762f81f1195db13c044745c9d19355b79123b3863f48d16cb36ea206f06bc692
-
SSDEEP
3072:/8Yi48ABLV6iIPsvULDriv1NVqB0sc3RWKNqTIGSE44W/cpn:O6po3PsvwnCNVm0sc3fqT9SEFWUpn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b63d422beaf4707700f7b72623cb424_JaffaCakes118
Files
-
4b63d422beaf4707700f7b72623cb424_JaffaCakes118.exe windows:5 windows x86 arch:x86
8035d1b99799c38f400040f12b8e72e6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetForegroundWindow
GetWindowThreadProcessId
kernel32
IsBadReadPtr
Sections
.zazil Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ebktml Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enmjej Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ