Static task
static1
Behavioral task
behavioral1
Sample
f9f3116f91440cd71b2dbf497ae95280_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f9f3116f91440cd71b2dbf497ae95280_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f9f3116f91440cd71b2dbf497ae95280_JaffaCakes118
-
Size
52KB
-
MD5
f9f3116f91440cd71b2dbf497ae95280
-
SHA1
325d37e47e47351ce6d2186e6490216afc4e3b16
-
SHA256
32354ef73e672422615e7423f6c4b75e181f1e44c676a673bfafc2378bdb540e
-
SHA512
8d4805f2e0da983264c8067d7b99d3c5f6a4192fee9290e753c1eefdaee8e01de61dbb06564426f54102edd8498a65de845d00aee7cfc31d914868eea1e4da02
-
SSDEEP
768:t4AuVGyPfeUvmEoYVK5SB4qLvIQc6W2M4aAg+W9VtgQ57EVtWpVtl7X/Vtf:ru3HXTK5SBQP2M4UX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9f3116f91440cd71b2dbf497ae95280_JaffaCakes118
Files
-
f9f3116f91440cd71b2dbf497ae95280_JaffaCakes118.exe windows:1 windows x86 arch:x86
330ae68fd35ae99521a0ac6a1fd9b999
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
Sections
����\b�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ɓˢai Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
��{��� Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ