Static task
static1
Behavioral task
behavioral1
Sample
08c839023be9c7c4f0d0792545c5146c_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
08c839023be9c7c4f0d0792545c5146c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
08c839023be9c7c4f0d0792545c5146c_JaffaCakes118
-
Size
9KB
-
MD5
08c839023be9c7c4f0d0792545c5146c
-
SHA1
7c3a4e07ac17f0ee6e81bc54218097b05f1e2f5e
-
SHA256
fe6e24c0c0c3ea0e5d1e489aae382b8be3034fae003b42a5e68146916d3644c1
-
SHA512
8c66f70dbed65ed5ecc5a0aebaec5cf09feece747ca8e7ad325be3bcbdf99a5c2f283b2ce14aa38189031a21bd7129dfbf663b9138500b5c1dc2b3c3dc8eb928
-
SSDEEP
12:etGSGQRtLa/4bU+Ag5I8+dy8XRwloAcSyFom86C1QGuZlhE5Bu:etGS9xa/4zAg+dbW/y6Pyu5Bu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08c839023be9c7c4f0d0792545c5146c_JaffaCakes118
Files
-
08c839023be9c7c4f0d0792545c5146c_JaffaCakes118.exe windows:4 windows x86 arch:x86
b547b1487151c8557bcbc6c24574ec6b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ExitProcess
VirtualAlloc
Sections
.text Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE