Static task
static1
Behavioral task
behavioral1
Sample
424d14fa6394aefe3b6cdb3592da7bc1_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
424d14fa6394aefe3b6cdb3592da7bc1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
424d14fa6394aefe3b6cdb3592da7bc1_JaffaCakes118
-
Size
54KB
-
MD5
424d14fa6394aefe3b6cdb3592da7bc1
-
SHA1
04a1dc8d4285e06c29c35a7c0a646ce858dffc4d
-
SHA256
b5a0209c9f0188461e826e62ee1289e25f75a40d349c10f5af03dae66ba4c5b2
-
SHA512
b27cf116904b41e0c321782bafaccdb058c4c2385e6a3113202a10c2d0ee3e65508dda624d6760afc31d7643d850949ec2812eab3440c5ddbc1627e0ea848dd8
-
SSDEEP
768:WW6mTtia4lKTsWvsuRXmMSuVB82v2Eizs+GwC1J0BdsKJFopB3tNe/L+e9kfJ2n/:VZTtpBvkk2MSibvTifi0dizAK0eD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 424d14fa6394aefe3b6cdb3592da7bc1_JaffaCakes118
Files
-
424d14fa6394aefe3b6cdb3592da7bc1_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 49KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE