Static task
static1
Behavioral task
behavioral1
Sample
0a3b16d50d1953f328297fd153039af9_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0a3b16d50d1953f328297fd153039af9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0a3b16d50d1953f328297fd153039af9_JaffaCakes118
-
Size
345KB
-
MD5
0a3b16d50d1953f328297fd153039af9
-
SHA1
7e8f2a27a72d05b9aff3ad0d9f6f243738e571b0
-
SHA256
e68a37866d39d9d35f80228ca72f75b20674a2058f94ec7119ffb07d31403498
-
SHA512
bf03bb377215748a28dc8f387e1bbf6c1665ab2b21d4002b6399b96c57952c8bffedb78f39960c0ea6f4ffdf7bb6320217de35ebd4d3750398d7885067490735
-
SSDEEP
6144:nWfQ60TRtCGnyDbyG+Dh2P20OjFQJt3yd3+ci1CPXABs8xeVl4in2AwJh:nWfQ60lRyDbUd2+gtu3+CPXABs8s4inA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a3b16d50d1953f328297fd153039af9_JaffaCakes118
Files
-
0a3b16d50d1953f328297fd153039af9_JaffaCakes118.exe windows:4 windows x86 arch:x86
79b3362178937bf9559741c46bb9e035
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
Sections
.text Size: 1KB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 113B - Virtual size: 113B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 342KB - Virtual size: 342KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104B - Virtual size: 104B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE