Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_4ed9a08d90b80dc451fb76cd555f99bb.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_4ed9a08d90b80dc451fb76cd555f99bb.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_4ed9a08d90b80dc451fb76cd555f99bb
-
Size
224KB
-
MD5
4ed9a08d90b80dc451fb76cd555f99bb
-
SHA1
9a643edefeb91fd3df90c5b968cddffb9782e107
-
SHA256
327642ea179b19323851e332c5f54c4127df2696c3f57395b78bff7ccd589b3d
-
SHA512
5027effd4369c97366b6ccd1b646c4b8458f05ba270f5ebd093b668d171e542fe3a7f9695f1b56f7931e8ba81c4ec911cf1b60acdcce97adcfa17996351ff62c
-
SSDEEP
3072:rb8IM9D5woXXreupOnXY8/ZnLSpWKaIWHnDFoo97pzJ+nYkOCwynsVvRokCB/bnl:0IUWJlfQw+oJpzmfwssLJC5opH9DH3zq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_4ed9a08d90b80dc451fb76cd555f99bb
Files
-
JaffaCakes118_4ed9a08d90b80dc451fb76cd555f99bb.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 214KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE