Static task
static1
Behavioral task
behavioral1
Sample
0495d9ba88181a8771ec44c67218f7c1_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0495d9ba88181a8771ec44c67218f7c1_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0495d9ba88181a8771ec44c67218f7c1_JaffaCakes118
-
Size
59KB
-
MD5
0495d9ba88181a8771ec44c67218f7c1
-
SHA1
c054850bcf059e45a277ff5e05b7c43e3f6b62f1
-
SHA256
532732337d3700af0eca219c6cc0b4558ce85a139ea6e59e419cf37a051c3382
-
SHA512
98cb2d8711b6233391c738079e468f50d35a9f3259b9d79e2fb7cb9a51a994d128bbdccc2abbb118449feaf1ab97e873cb98999809e10eaa82db782a9b66945e
-
SSDEEP
768:ueytHDATQvbuLMEoRDA7DpWtypPQqYR+poiDipQMd6zGsp:uhcTQvbuLNNQ4mQMCGQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0495d9ba88181a8771ec44c67218f7c1_JaffaCakes118
Files
-
0495d9ba88181a8771ec44c67218f7c1_JaffaCakes118.exe windows:41207 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
rqiqaryq Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
qjbyjzby Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jayayara Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
briazzza Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ