Static task
static1
Behavioral task
behavioral1
Sample
b4d4ef4d6611652f3c3b2a7a2b4ba4ff_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b4d4ef4d6611652f3c3b2a7a2b4ba4ff_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b4d4ef4d6611652f3c3b2a7a2b4ba4ff_JaffaCakes118
-
Size
293KB
-
MD5
b4d4ef4d6611652f3c3b2a7a2b4ba4ff
-
SHA1
d0c18155f73af8177e546796ea70e2bbf9240b3e
-
SHA256
6475f436077b815a34383043ba2daf6a90a78072a75901a87f8866fee2566a38
-
SHA512
75aa38aee45ee925da9c9a75f160856eac9050181f86415476be959d740010c5bdd6ef8498db33e6a1b19d4c59b36a722aa1ad466578eee1913a308d98a55f4f
-
SSDEEP
6144:scY+kIrQpk1PEyLE2MN632pbxp6oS13yM4+NzPkxu9kYoAV3LytnhB3Rfp:uZIsC1PVE2MN621p2lyh+NzAEkLAQhBD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4d4ef4d6611652f3c3b2a7a2b4ba4ff_JaffaCakes118
Files
-
b4d4ef4d6611652f3c3b2a7a2b4ba4ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
Size: 288KB - Virtual size: 696KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE