Static task
static1
Behavioral task
behavioral1
Sample
4470c7fc4a32b31c13929c37dca88a46_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
4470c7fc4a32b31c13929c37dca88a46_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4470c7fc4a32b31c13929c37dca88a46_JaffaCakes118
-
Size
217KB
-
MD5
4470c7fc4a32b31c13929c37dca88a46
-
SHA1
3d6b5f1e581c27a37e586a14bb83cb1377a801a0
-
SHA256
b1c9ceaaf9c984fd3efc1e3b042fa7a9a4e2983df470a9b33877d7f782975b1b
-
SHA512
a6c6bfa26cf401ffd11f8f974ca30d6ed13802b520bfbb2ce19dc89749a69fe4cb7d51ce548c83b87355060217b945dba64066aee9fa24e697a308074d7a02f1
-
SSDEEP
6144:c4/lTeX8FHSCq+6ljEAgVW7aikpWnXbHWRjhYZRoxGKE:Nx7mp1GW7bkpWUjhUcHE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4470c7fc4a32b31c13929c37dca88a46_JaffaCakes118
Files
-
4470c7fc4a32b31c13929c37dca88a46_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 209KB - Virtual size: 768KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE