Static task
static1
Behavioral task
behavioral1
Sample
821a4e515410478059b647b21bd2ffdb_JaffaCakes118.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
821a4e515410478059b647b21bd2ffdb_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
821a4e515410478059b647b21bd2ffdb_JaffaCakes118
-
Size
476KB
-
MD5
821a4e515410478059b647b21bd2ffdb
-
SHA1
35274344ea6e33ebe0dfa97e9a0aa3d72c6bf2ba
-
SHA256
e3f01a05abe2a91cf891bb7f0f2dae5b2a409710ba6af9aaab63ab67d413a46c
-
SHA512
765d9abbf4dc49470607fcef6402d447cf6984622681a01fa7896e0f4c4efd0341f50b147f14cdea11cdf541da86782c5b5783f094c30d5935d9dc848ab047e2
-
SSDEEP
6144:PjH17gWXRyMa2qZx/u1cPSOvkR2l8oUkUA98cwNZHIn2aTulM0c6ZADFIubVebpe:rVMKa2qX/k8YgU1cWin2p7GqG4p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 821a4e515410478059b647b21bd2ffdb_JaffaCakes118
Files
-
821a4e515410478059b647b21bd2ffdb_JaffaCakes118.exe windows:4 windows x86 arch:x86
4d8e9e06f8e51550e3e5089179e9846d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
Sections
CODE Size: 286KB - Virtual size: 668KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ccg Size: 92KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE