Static task
static1
Behavioral task
behavioral1
Sample
d4b3534dbcdf41bd71f6ca3d1bc33b78_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4b3534dbcdf41bd71f6ca3d1bc33b78_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d4b3534dbcdf41bd71f6ca3d1bc33b78_JaffaCakes118
-
Size
506KB
-
MD5
d4b3534dbcdf41bd71f6ca3d1bc33b78
-
SHA1
b67c3dafd5f75a6b2eddcbe2ef5a0da58d8efb38
-
SHA256
5d62d1a831c87b87f505f4fab5ba4b891b302fd41b9cb50f60297a7c26084b92
-
SHA512
fd2c7c8e5a82ff60be919312a67c8e5828d3927edff9294a68b98deee6fb65e47481b5b24fdb8c342059844d3a9c3d61a9bb7ffb081cc8598032f17049d77776
-
SSDEEP
12288:PaeN7co+vhVOxCe3p7kLhkA/xCXl6aCwrgJKbNeCfeFvUagU4k:PaeKJvhVUCe3ohlYhCDQhYMagC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4b3534dbcdf41bd71f6ca3d1bc33b78_JaffaCakes118
Files
-
d4b3534dbcdf41bd71f6ca3d1bc33b78_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 486KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE