Static task
static1
Behavioral task
behavioral1
Sample
4d80b046583769345470fb79a65d6d60_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4d80b046583769345470fb79a65d6d60_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4d80b046583769345470fb79a65d6d60_JaffaCakes118
-
Size
253KB
-
MD5
4d80b046583769345470fb79a65d6d60
-
SHA1
e59ef6074ff308ef02aebe4859e4abf6621d06fd
-
SHA256
ac1109d6e2f6a981c5116cea969757aa598257ab4986ac6ae0661061e1a536c1
-
SHA512
fd3851bc081331b3d4a0a1ae8a5d0a3585b63bb0dd51dd4904c04ebedfd347a91ba9b8ba198fad3c579ad55ace2c6c616cfd9548bb94c65b7ad743648573641c
-
SSDEEP
6144:3TZ2cH3OtX3AKMocsZg5tOE2AYaYMvNE/g3a:348OtXQKHOOE2n8Ng6a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d80b046583769345470fb79a65d6d60_JaffaCakes118
Files
-
4d80b046583769345470fb79a65d6d60_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 244KB - Virtual size: 696KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE