Static task
static1
Behavioral task
behavioral1
Sample
040e48a66697f44cf76ff5b55b51c045_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
040e48a66697f44cf76ff5b55b51c045_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
040e48a66697f44cf76ff5b55b51c045_JaffaCakes118
-
Size
94KB
-
MD5
040e48a66697f44cf76ff5b55b51c045
-
SHA1
cb0584c05e68f7bfead3e41b19ab4472c963b4e6
-
SHA256
0a039345a95eb2aaea7e1f9067a7ac88b55e825bf3ca07e157b0135d26f55f7d
-
SHA512
a90e9282013ab723759dc1293628178e9ed39d7b1e8e3efb65e078646ccde2823529086b181f8eb4884c3d4810b60c8643140c7734d3cea0062b58d06ba7dbb2
-
SSDEEP
1536:vLCfWfHUDImOBIl8pk1mlMIVnX1S15A8UVtxfWfHUDImOBIl8pk1mlMIVnX1S15k:vLCfWfH81mobY01oVtxfWfH81mobY01K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 040e48a66697f44cf76ff5b55b51c045_JaffaCakes118
Files
-
040e48a66697f44cf76ff5b55b51c045_JaffaCakes118.exe windows:4 windows x86 arch:x86
2c35ed123bf7fb5532653325910c7a41
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualAlloc
VirtualFree
Sections
.text Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.llydd Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE