Static task
static1
Behavioral task
behavioral1
Sample
4475b35570b016ca9c26b1d3fb5c164f_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
4475b35570b016ca9c26b1d3fb5c164f_JaffaCakes118
-
Size
16KB
-
MD5
4475b35570b016ca9c26b1d3fb5c164f
-
SHA1
44fa33ed17afcfc3d88ef94ad11cdbcc845a976c
-
SHA256
c4e3b9788a63ff2638ae7366cc7b1b7a0e3e0056e0e202c4cf96635453cdcdda
-
SHA512
63946c62f6d7b58225ac9d578fb95d12a5b57060160e834fc724b83f47c4833f5c37db3c07d2dd15775399f1ee62bbf4c54f588d82f1cfa4db505757656ed11f
-
SSDEEP
384:Z/bpgGl8X/6tOxmKX91MkPwUZFiBmrxR0C7agW9ZKl:5pgNX/6tO8KXMkIGiBmnbmR9Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4475b35570b016ca9c26b1d3fb5c164f_JaffaCakes118
Files
-
4475b35570b016ca9c26b1d3fb5c164f_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 15KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE