Static task
static1
Behavioral task
behavioral1
Sample
05abddc83872944bc27bb97d6c8a66c2_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
05abddc83872944bc27bb97d6c8a66c2_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
05abddc83872944bc27bb97d6c8a66c2_JaffaCakes118
-
Size
37KB
-
MD5
05abddc83872944bc27bb97d6c8a66c2
-
SHA1
af18b23098b85758df3eb3b60a7e6f739bbb7e30
-
SHA256
46e3b6df9e65e21d1c920441640ba41eb1643834118747aa29fa116abd9c9f94
-
SHA512
c56d48fce05cd7015923ad60a4c4f32b5dce340d4d9d4bc6d9b68f91469fd67a4f82f1ac0546ce355e9c80f347ee108462018a09d2719d9abb5251462d882682
-
SSDEEP
768:wxADVe61rguZXN8/vM7bkrefb9TqsDYbQ5TM1feJNT:wxAD8GXN+I7fJ+aCl1fe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05abddc83872944bc27bb97d6c8a66c2_JaffaCakes118
Files
-
05abddc83872944bc27bb97d6c8a66c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
d62ab77434adac1b7f4219eeeaf1d72c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_except_handler3
memcpy
fclose
fwrite
fopen
strcat
strlen
exit
strstr
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE