Static task
static1
Behavioral task
behavioral1
Sample
4e180e81ecdbc1737e7200b80e45fd08_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4e180e81ecdbc1737e7200b80e45fd08_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4e180e81ecdbc1737e7200b80e45fd08_JaffaCakes118
-
Size
20KB
-
MD5
4e180e81ecdbc1737e7200b80e45fd08
-
SHA1
3b38f2d960214c07a6fd21377cc092c303d20ea9
-
SHA256
9e8d2c74cbb8a713b3a304fb0cfc6c203b3781cca8ec147f22adace3f9e7481b
-
SHA512
9635d2128f94d0fdd1eea087ad2fdc1838f9dc3ea0ccaba359ccb6df2f6daceb2b29e921aea2dbb122910a8e25ac1fc6eb825fc3503ce32af86a2e464875a5d1
-
SSDEEP
384:MfRoLZpdEvZXLuglCsq58b+TrsV3WynBLu47ZkSz2yXjA6rpnt35I+:MfvbDlCbqaytuFyMQt32+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e180e81ecdbc1737e7200b80e45fd08_JaffaCakes118
Files
-
4e180e81ecdbc1737e7200b80e45fd08_JaffaCakes118.exe windows:4 windows x86 arch:x86
0d54db1630134e952d4621e358989822
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDateFormatA
IsValidCodePage
FreeEnvironmentStringsW
SetProcessWorkingSetSize
ReadProcessMemory
msvcrt
strncat
_onexit
strtoul
_initterm
strrchr
strncpy
strcat
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE