Static task
static1
Behavioral task
behavioral1
Sample
f80e0711a18ed4b9bb274741201a042b_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f80e0711a18ed4b9bb274741201a042b_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f80e0711a18ed4b9bb274741201a042b_JaffaCakes118
-
Size
26KB
-
MD5
f80e0711a18ed4b9bb274741201a042b
-
SHA1
32b9156a1dd88d1b40b1f360b8c3756c23a232d6
-
SHA256
a928f08522d4150f0741f7893dd03faac1cd9c2a91aff8cdcd525b42b709895f
-
SHA512
b50149100261c298992e806edc7cf507ba6b95a8ead1ff9367bbc6f112e330d4b29ae3334b638ac00b7c40647eb0ab370e33c7f9bbdbfa492350afc5d6be8185
-
SSDEEP
768:klo4gply28lc0kIQu/zJoUZB8D2hGDdv9MJuhY:gobplydlc0h5/zJoUZBqhDdSJuhY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f80e0711a18ed4b9bb274741201a042b_JaffaCakes118
Files
-
f80e0711a18ed4b9bb274741201a042b_JaffaCakes118.exe windows:4 windows x86 arch:x86
d76f4237a8ae158292f09835997a1d9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
Sections
��r�fl�/ Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�jBQ�F�3 Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
����| Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ