Static task
static1
Behavioral task
behavioral1
Sample
d4493bca9ccbad4fb928c32aaebe0f69_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4493bca9ccbad4fb928c32aaebe0f69_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d4493bca9ccbad4fb928c32aaebe0f69_JaffaCakes118
-
Size
303KB
-
MD5
d4493bca9ccbad4fb928c32aaebe0f69
-
SHA1
18585643d484723d62c0906728daa40238db63fe
-
SHA256
b7f5bf7107d29a04d95d9a079d8165dc641e4e5400bd704e74f5df35de87bebf
-
SHA512
8a0651626a41c6986ff2e19b91e9573e10e9f26620ca42402901546ec2d3f3895878546cf798f39c207f4dd38f979025f8117a23be81fbb75b2f8322f33080f3
-
SSDEEP
3072:hGXaKijINYc61zwLvJeQoY6NDRPs15TwlID1D:Hrj3c61zXZNR85c6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4493bca9ccbad4fb928c32aaebe0f69_JaffaCakes118
Files
-
d4493bca9ccbad4fb928c32aaebe0f69_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 275KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE