Static task
static1
Behavioral task
behavioral1
Sample
4cf2ff34bb9a00243770fda290df7ef5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4cf2ff34bb9a00243770fda290df7ef5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4cf2ff34bb9a00243770fda290df7ef5_JaffaCakes118
-
Size
348KB
-
MD5
4cf2ff34bb9a00243770fda290df7ef5
-
SHA1
812d44df443add2639789f183821ac4c23cc2bfa
-
SHA256
c42f11cc670dfe9a09d252ca4ed0cf41d0b62b3be6fc0b825434bba53ae203b5
-
SHA512
eb4c5f6042db041e7d7b07ae6ca9c6cc008a93a7eb7682518073dc17658d1f29ddbc19be20f4cd6c4ac19ee86627c253cd8e29a3ff1e05a06394e7a7aa010a3a
-
SSDEEP
6144:It38Q9oReS/+id/+q8wNcVibjvE5wex5PQ2S0NVRTLY3EYslD:Wl6KkmqlSVibLE+expQ2S0Ys
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cf2ff34bb9a00243770fda290df7ef5_JaffaCakes118
Files
-
4cf2ff34bb9a00243770fda290df7ef5_JaffaCakes118.exe windows:4 windows x86 arch:x86
3a4966457916b4c35905346dd33847ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
ExitProcess
GetSystemDirectoryA
GetModuleHandleA
CloseHandle
UnmapViewOfFile
lstrlenA
VirtualFree
GetProcAddress
user32
wsprintfA
ole32
CoUninitialize
crypt32
PFXVerifyPassword
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 184KB - Virtual size: 755KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ