Static task
static1
Behavioral task
behavioral1
Sample
08be2d898a2d954ef1d8ded9756e1c48_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
08be2d898a2d954ef1d8ded9756e1c48_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
08be2d898a2d954ef1d8ded9756e1c48_JaffaCakes118
-
Size
7KB
-
MD5
08be2d898a2d954ef1d8ded9756e1c48
-
SHA1
c9dbda3c956eaf42f65fb39da3ad296833267942
-
SHA256
a40bcd8edda4cf95f8635c47f0ad3778d3c0c19e1d75ee7065df73a4ccef4a89
-
SHA512
4953eb3e9b4ab96c15052614e8aeed6df48635e6ca2f73d85ca4fb95f8f7d7c35dd03cecdbf82b6e704a163d79774dab15d6fec74816b5ee5fe4daa4b08c575b
-
SSDEEP
192:XkA7Y11X14S/lMM3ghsy/1wSVotPsWLlnX:XvsN4S/lj2/1RoxsGlX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08be2d898a2d954ef1d8ded9756e1c48_JaffaCakes118
Files
-
08be2d898a2d954ef1d8ded9756e1c48_JaffaCakes118.exe windows:4 windows x86 arch:x86
028ad07e6447616cbbfef8fe4f6c232a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceA
CreateThread
VirtualAlloc
HeapAlloc
GetProcessHeap
Sections
.data Size: 1024B - Virtual size: 518B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ