Static task
static1
Behavioral task
behavioral1
Sample
4d454e03a3dc5eded70433a10e74e317_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4d454e03a3dc5eded70433a10e74e317_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4d454e03a3dc5eded70433a10e74e317_JaffaCakes118
-
Size
250KB
-
MD5
4d454e03a3dc5eded70433a10e74e317
-
SHA1
a444059c41bad2287f5039f9a7a12c8c98193113
-
SHA256
4af85c4ee0b8d1b6b1f2fd289080a0c99be4f3983c8b9de62d5f03c1b4bf2ccf
-
SHA512
76ea0da7c4785189b04fa12bbc282b756215e743b69945a6c3184816a5df68647fab56d70c582ce819e8e3dd79897f61aaedfc1dbcc0dabb1c2709e21a9b2cf8
-
SSDEEP
6144:+QX0NmKxbPfZupiGIZtVQYNhr8r4e+hFMT04nrlm39wu:bXbWbPfaUmYNyr4e+UY4k+u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d454e03a3dc5eded70433a10e74e317_JaffaCakes118
Files
-
4d454e03a3dc5eded70433a10e74e317_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 230KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE