Static task
static1
Behavioral task
behavioral1
Sample
4e0ee1473cd84a2bdf3640cfee6effc8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4e0ee1473cd84a2bdf3640cfee6effc8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4e0ee1473cd84a2bdf3640cfee6effc8_JaffaCakes118
-
Size
1.3MB
-
MD5
4e0ee1473cd84a2bdf3640cfee6effc8
-
SHA1
a8b988b56b479a85d10f85224b6ab650da3e7afd
-
SHA256
1623fd08a261608cb0e51e209b41f6a7d5808ac2babccea729b8310e1e5fe537
-
SHA512
6a7e1f23a001cd257c930634ba0de485bc4264286e51ccb17db5673f3b607ccdaec988655fbdf1d7af3e4dedcbeea6de21137b2cb96b773a7a968f7f8f176a0b
-
SSDEEP
3072:bjG4pPhLI1zwLv/2IfwNeginVpo7l4BTJVC4MjP0UsIIUUTv:vG0PhLI1zHIjginVpo7l4N2s5IAT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e0ee1473cd84a2bdf3640cfee6effc8_JaffaCakes118
Files
-
4e0ee1473cd84a2bdf3640cfee6effc8_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE