Static task
static1
Behavioral task
behavioral1
Sample
ede35bb73fbfc68f2794007e07f13cfe_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ede35bb73fbfc68f2794007e07f13cfe_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ede35bb73fbfc68f2794007e07f13cfe_JaffaCakes118
-
Size
10KB
-
MD5
ede35bb73fbfc68f2794007e07f13cfe
-
SHA1
af83ef9f8dc23bfbfe558337c4bad67eea01fb34
-
SHA256
6adaa9f35a50e292954e942886d481d3f09a463d9f06f9f8838d791cc8c56554
-
SHA512
c01ad878d56bae904fc6821227c799402155c838286f715a0047a666fe1c687fde2f77cf4ff92a25443d179f5e4f2290f21f824804dcc6b7bdb6a5519659a243
-
SSDEEP
96:RnpOcEUJXMVo2Ga17khQKiqmHoPBHhqnFkQ/Pn2ZYQG4I5vfJzku/jWUNzUqEl/k:VocEUJ82Fa0nBqB2ZPEJTWYz0/DdBE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ede35bb73fbfc68f2794007e07f13cfe_JaffaCakes118
Files
-
ede35bb73fbfc68f2794007e07f13cfe_JaffaCakes118.exe windows:4 windows x86 arch:x86
5fb9be659485e98bc6d04b5f2af310f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ExitProcess
LoadLibraryA
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 524KB - Virtual size: 524KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE