Static task
static1
Behavioral task
behavioral1
Sample
454e2f0e2e26696b0f438a6c378458e3_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
454e2f0e2e26696b0f438a6c378458e3_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
454e2f0e2e26696b0f438a6c378458e3_JaffaCakes118
-
Size
82KB
-
MD5
454e2f0e2e26696b0f438a6c378458e3
-
SHA1
9765ffc76e06bcb2da0049be4c81dbb6a47b9d82
-
SHA256
19ba6d9c42754ed528e6410a1ed1f919509a8ed27d241d8bdbf9a435b91fcd74
-
SHA512
a2f91039a54dc5a9e8c7d244aa53c0412f2b4f7480165c0a40e09fd07cbd703733e498036713ad70ed6e3194e3530573b12fa908b4afe9ee980c7bc8cacd5f2f
-
SSDEEP
1536:SxBooYH22yXKFsnmMGvIh6mW1ljt/ZXKMnhHhLhS/E1gIfr2LNb0t8/x:SxaCjmNQhslLnhHbMIfr2Ld0iJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 454e2f0e2e26696b0f438a6c378458e3_JaffaCakes118
Files
-
454e2f0e2e26696b0f438a6c378458e3_JaffaCakes118.exe windows:4 windows x86 arch:x86
827ae9e92f0226e668e5b65613328163
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
ws2_32
inet_addr
Sections
.dsad5w4 Size: - Virtual size: 428KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dsad5w4 Size: 81KB - Virtual size: 84KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE