Static task
static1
Behavioral task
behavioral1
Sample
f7bdc7b5643c8da419a14bb443497f6d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f7bdc7b5643c8da419a14bb443497f6d_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f7bdc7b5643c8da419a14bb443497f6d_JaffaCakes118
-
Size
18KB
-
MD5
f7bdc7b5643c8da419a14bb443497f6d
-
SHA1
1deea4224ac00ad4222369b89105d8a5838d6189
-
SHA256
bfe0c5663f42fa4acfd8d0b894f38eb0d09259dd90368a95100b0f7946295fe2
-
SHA512
06acb64f782d954b04ec49913b0d76228944befcf06441b68506cdb6e9f07d72256221998f50116906dbfec125d45d9a2206183cf078c4900813277e5ad33ea2
-
SSDEEP
384:9mJHU3G07DN/8SGZ3WSZuxdm/tZtctZt7tst7tjA+SFdg:9mJH8lsZZu0tZtctZt7tst7t0LW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7bdc7b5643c8da419a14bb443497f6d_JaffaCakes118
Files
-
f7bdc7b5643c8da419a14bb443497f6d_JaffaCakes118.exe windows:4 windows x86 arch:x86
d76f4237a8ae158292f09835997a1d9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
Sections
V2b�T�:� Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
U��O��.- Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
r��x+& Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ