Static task
static1
Behavioral task
behavioral1
Sample
9f348f0132df1015d086f19adbe00d49_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9f348f0132df1015d086f19adbe00d49_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
9f348f0132df1015d086f19adbe00d49_JaffaCakes118
-
Size
64KB
-
MD5
9f348f0132df1015d086f19adbe00d49
-
SHA1
ca9dd4bda6ab23de99cd11408fd2374b4455f181
-
SHA256
590708810e82934a5f1d2dca9f0761aa88676591bbf2456db6495640738dd6ec
-
SHA512
4ca752ae8f509b4fffb053d45cc423586d0dad0f856529cf92c1ca767d35ee82fd57e2477c366a3533a9c14c1d5090deb7e72a544fc8bf898e30f916726baa5f
-
SSDEEP
1536:J8kv5aow0oIRdJ1YPReoWk/10CxDvAZSszEhUf+asW:JqNh8SPURk6ChvAZSszEef+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9f348f0132df1015d086f19adbe00d49_JaffaCakes118
Files
-
9f348f0132df1015d086f19adbe00d49_JaffaCakes118.exe windows:4 windows x86 arch:x86
350bd386a8f6ef38eda670cb91b98cfb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
cygwin1
dup
Sections
.MPRESS1 Size: 60KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE