Static task
static1
Behavioral task
behavioral1
Sample
b4d2ff2b6b5ee9316b290611e6330939_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b4d2ff2b6b5ee9316b290611e6330939_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b4d2ff2b6b5ee9316b290611e6330939_JaffaCakes118
-
Size
55KB
-
MD5
b4d2ff2b6b5ee9316b290611e6330939
-
SHA1
0aaa176a73178961ec3dd3a40dbc2cdc1b3c55a9
-
SHA256
11dc0bb321299557e68d45a7ad2e6ceaa5219686a9dfb4cd3fd67c71ec308e74
-
SHA512
c7c13b2cae3237fa3d38bbda47c15b319490249912914f97a6e40ddda28c56f97509010725b977f2231efafc856934171b3452f01d273075ae3fc2e4fc3aaf82
-
SSDEEP
1536:vuXDTuVwsWuS3cfKO/zMhE79HivJEdkAaB:vQujW3E/wh5vJfAaB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4d2ff2b6b5ee9316b290611e6330939_JaffaCakes118
Files
-
b4d2ff2b6b5ee9316b290611e6330939_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 49KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE