Static task
static1
Behavioral task
behavioral1
Sample
b4b9bff10f57eea5bd0e4cf8264bc3b9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b4b9bff10f57eea5bd0e4cf8264bc3b9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b4b9bff10f57eea5bd0e4cf8264bc3b9_JaffaCakes118
-
Size
53KB
-
MD5
b4b9bff10f57eea5bd0e4cf8264bc3b9
-
SHA1
a88d763b3ddabafad3e269e0414eaa5237f4dabe
-
SHA256
84350ae1ca689b1bf26d93d80ba61ccc32039d7bc4ca12c3de2e2910371bae84
-
SHA512
fea9b5009e2053244da65d6c654b5ddecd1d70903c9412b82843138c5f939ad34691c538132b13108c392b2ec52b53eda562e6a70d012856d5e5aa1379f8dc43
-
SSDEEP
768:wd6fGT5uK1COK8CU1ppZHzuusQVT8SSpqoszZ4wnHySSHOFr/bcgmfEEPiBd/:wd6+F71TKyppousKASkq70HAEaEPqd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4b9bff10f57eea5bd0e4cf8264bc3b9_JaffaCakes118
Files
-
b4b9bff10f57eea5bd0e4cf8264bc3b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 38KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE