Static task
static1
Behavioral task
behavioral1
Sample
01ea05724cfb052701ba27f6bd0a0e9e_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
01ea05724cfb052701ba27f6bd0a0e9e_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
01ea05724cfb052701ba27f6bd0a0e9e_JaffaCakes118
-
Size
110KB
-
MD5
01ea05724cfb052701ba27f6bd0a0e9e
-
SHA1
13411ac1a2d55d6047f96fd0037783dc7e2f553d
-
SHA256
da4bf75fe96a8178c5bef254592fda6804f82ff0270184bd6b00254b5437d175
-
SHA512
ca73efa08ff17c823f939042405b79df201b0ae0c6f24d1cb7d6286855852e1247b3e219aa807b8f0891af4f975e6932e752567e40d77e7cad0020615735d628
-
SSDEEP
1536:UbV1iOPcJqALHOHyv1ovOcDQob70GFOujzvTdxa3a+6Pi8FzU+PCQ:UbDPcJqALyzGIQS7GQz7dxa3Z6q/i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01ea05724cfb052701ba27f6bd0a0e9e_JaffaCakes118
Files
-
01ea05724cfb052701ba27f6bd0a0e9e_JaffaCakes118.exe windows:4 windows x86 arch:x86
2f3c5da38e687ed8e68cd2b55dbd54f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
Sections
x140le Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE