Static task
static1
Behavioral task
behavioral1
Sample
d470fd58aa9a0af34a0b7606ad1d4eae_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d470fd58aa9a0af34a0b7606ad1d4eae_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d470fd58aa9a0af34a0b7606ad1d4eae_JaffaCakes118
-
Size
1.0MB
-
MD5
d470fd58aa9a0af34a0b7606ad1d4eae
-
SHA1
28af4d053e7f52086427176ed36a389e9c3e0c78
-
SHA256
3568217e714f5cea8071795dd54bb164343e38d5f40637acd15bfad3e2de6a2f
-
SHA512
2fe931dc083138938fb016b0d1df5f151553c719c40be7f5cc469ad6060723a67fe3f875298ed3af33fe813726bcda5e9a0cc7721f20522d3bd82f5f4ea0e7e1
-
SSDEEP
24576:tDOfYPrO8mDqRuAKOvLciU/XHhccGZUR9utB5a0X:tIDqR1KMwB/xccGSQv5X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d470fd58aa9a0af34a0b7606ad1d4eae_JaffaCakes118
Files
-
d470fd58aa9a0af34a0b7606ad1d4eae_JaffaCakes118.exe windows:4 windows x86 arch:x86
a7333743ef063a68d1d860bbdf1c328e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
VirtualAlloc
Sections
.petite Size: 477KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 520KB - Virtual size: 7.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE