Static task
static1
Behavioral task
behavioral1
Sample
f582ec93654e6880d1b36c3e3a7d3d68_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f582ec93654e6880d1b36c3e3a7d3d68_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f582ec93654e6880d1b36c3e3a7d3d68_JaffaCakes118
-
Size
44KB
-
MD5
f582ec93654e6880d1b36c3e3a7d3d68
-
SHA1
51defcd6f03f2a756c957327921e5d29c6c7cf16
-
SHA256
9d9f50238deec396c8ed6536dcfda50289acbc864274634428bd0a977deb350d
-
SHA512
5341c8a19717ef95874b3525207d0a361052b1755fca1595bbea9387892b148a36980e3692154ccf9a03061e5d29fb6844e797606edd1b7480c61f3a7ba613c0
-
SSDEEP
768:tklZTM4UkzJO5UC5NNetoi11fO76qMtqYyFc7ycWTiZIoXX/gxHOLBsmJh:uwIZC5Stoi1422FgycW+z9Lum
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f582ec93654e6880d1b36c3e3a7d3d68_JaffaCakes118
Files
-
f582ec93654e6880d1b36c3e3a7d3d68_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 42KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE