Static task
static1
Behavioral task
behavioral1
Sample
4dcba64c83fc2906feb3eac36e13bd6c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4dcba64c83fc2906feb3eac36e13bd6c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4dcba64c83fc2906feb3eac36e13bd6c_JaffaCakes118
-
Size
152KB
-
MD5
4dcba64c83fc2906feb3eac36e13bd6c
-
SHA1
091ef1fb0c1b89e11fb496196b54bd3ca0c37bc3
-
SHA256
6ec7b18f2b5a4385a3486cc619684ec7bcf019699897e7e12c90af0d894e4a4f
-
SHA512
e2a0074ac5e5650ffe64d4d52d5b30b48db721bbffb523080a8a47c545a08036d5bbae219dcae67e0ce0bdc3c3aebd3720309347210bf90f57d29815f81e3339
-
SSDEEP
3072:ClbvmDUgBmrh/nUb8oti1WsdggZtNs4IgSaTCdY/ytsKYbIaghc+:CFsPmd/UAotnrEtNaglTCdY/ytsKYbI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4dcba64c83fc2906feb3eac36e13bd6c_JaffaCakes118
Files
-
4dcba64c83fc2906feb3eac36e13bd6c_JaffaCakes118.exe windows:4 windows x86 arch:x86
a7333743ef063a68d1d860bbdf1c328e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
VirtualAlloc
Sections
Size: 74KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 984KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE