Static task
static1
Behavioral task
behavioral1
Sample
ff4f5124f673a2721fd3f3ff6e4a4cf5_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
ff4f5124f673a2721fd3f3ff6e4a4cf5_JaffaCakes118
-
Size
6KB
-
MD5
ff4f5124f673a2721fd3f3ff6e4a4cf5
-
SHA1
b870b7872696274d2fe102139b4e8f7dac318f5e
-
SHA256
34dff3e97eb7d3f1b2168f9cf0ea0122e5d1945e3d3e0b3f246323081498c9db
-
SHA512
81f199b8b5ab6d7734407586f2642097db45821bb2e89c9a9248d92168c33f756ff6c8d1ca2425bc8dc8c5848781e264a68c0d8af39ac4b2dcebaaab9a082b20
-
SSDEEP
96:cYp0wFdXgLQBa1blcFZhn9Uub4eIQQbkvNniyi1axU5CdX32AZm8oRRAvaLzBFJ:j0wFdwLaaOD9UubKQ8k1nhZ32AZmvAO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff4f5124f673a2721fd3f3ff6e4a4cf5_JaffaCakes118
Files
-
ff4f5124f673a2721fd3f3ff6e4a4cf5_JaffaCakes118.exe windows:4 windows x86 arch:x86
b71d8c1931cb0a297806c1529ed52c6b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ExitProcess
FindFirstFileA
GetCurrentDirectoryA
ReadFile
CloseHandle
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE