Static task
static1
Behavioral task
behavioral1
Sample
f8c8261d15ac899ed7ca7da785be2f69_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f8c8261d15ac899ed7ca7da785be2f69_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f8c8261d15ac899ed7ca7da785be2f69_JaffaCakes118
-
Size
45KB
-
MD5
f8c8261d15ac899ed7ca7da785be2f69
-
SHA1
1e9e493f8a1b1d49cb923e1b181b63e38a3cf778
-
SHA256
151d87625af2d66affc77bce07749f5327bd95eb71e9400f31fc827e2f86593c
-
SHA512
9c70789dfaae952d44f303185973ce34f5b28d777fe0813156af16c3f581ab8b5b8ee9f8e5f49ffeeaf444a80d98d1e4c27485a0d07e448922aee7e33040a9b9
-
SSDEEP
768:53T6/tU/6Tv9ReFciJbatIXzlQIscQm56WDG/Xs9J1QjLsUcraA2:BT6/tU/6TLeFY2hE1509J6jLFcrF2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8c8261d15ac899ed7ca7da785be2f69_JaffaCakes118
Files
-
f8c8261d15ac899ed7ca7da785be2f69_JaffaCakes118.exe windows:4 windows x86 arch:x86
a618f2cbac0ad90c3937be52939d745b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
WriteFile
CloseHandle
CreateFileA
Sleep
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE