Static task
static1
Behavioral task
behavioral1
Sample
b4826650cc11c5480dd59dc9b29622f5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b4826650cc11c5480dd59dc9b29622f5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b4826650cc11c5480dd59dc9b29622f5_JaffaCakes118
-
Size
612KB
-
MD5
b4826650cc11c5480dd59dc9b29622f5
-
SHA1
9a77509886110c644bcdbdf18d28175fa1bf8149
-
SHA256
05479c1fdf33cccc7d458c394c84d1e6e741580050e66b06c9d3a5429646ff00
-
SHA512
23d4aacae3c1c9d2b94a8e064212fc4304cea7a436ef364d155e18197dd36a49b6902dbbc050578e176b6294c6c33356fecaa2ea93b7cdbcd33442ff0f3397fc
-
SSDEEP
12288:tQ2Q2Q2Q2Q2Q2Q2Q2Q2Q2Q2Q2Q2Q2Q2Q2Q2Q2Q2Q2Q2Q2Q2Q2Q2Q2Q2Q2Q2Q2Q2E:tQ2Q2Q2Q2Q2Q2Q2Q2Q2Q2Q2Q2Q2Q2Q2k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4826650cc11c5480dd59dc9b29622f5_JaffaCakes118
Files
-
b4826650cc11c5480dd59dc9b29622f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE