Static task
static1
Behavioral task
behavioral1
Sample
74669896317eda2e47289b6d10907bbb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
74669896317eda2e47289b6d10907bbb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
74669896317eda2e47289b6d10907bbb_JaffaCakes118
-
Size
46KB
-
MD5
74669896317eda2e47289b6d10907bbb
-
SHA1
8ad0466918245105e08942ef7038a9a187f83acc
-
SHA256
c26fae9f0810b7d7ef4cc8c0300d26503da7fa8736bfe7c1c04ca00be6a360c2
-
SHA512
a196d289a9999377ad3a35edf3fd5a0807b1b1d0b8ca213c873990a4e3615f44e013eec8703d72fce91bd88f3b8c909f9bcb3db4c7aa3505289cd6c70a8261d9
-
SSDEEP
384:Sebi+smvabV6dSwxE1sh0X9iHOm7yN3BvwqWJB4M57coR+H3BUwwOvoxOV1l:3bimdjEqKXYJulwz95coIx91
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74669896317eda2e47289b6d10907bbb_JaffaCakes118
Files
-
74669896317eda2e47289b6d10907bbb_JaffaCakes118.exe windows:4 windows x86 arch:x86
5956d710a9aca8a8bb88faec16ed2f9e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
VirtualProtect
Sections
Size: 10KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE