Static task
static1
Behavioral task
behavioral1
Sample
0e55c43f2a4ab506ef8538ab0f5c95ea_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0e55c43f2a4ab506ef8538ab0f5c95ea_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0e55c43f2a4ab506ef8538ab0f5c95ea_JaffaCakes118
-
Size
58KB
-
MD5
0e55c43f2a4ab506ef8538ab0f5c95ea
-
SHA1
580403b0f52fbf12f2b5382a6e32e51cf21b75ad
-
SHA256
7e34b798af7763c10af700bdf46036e599e38b196fdff2d797257aae87a57182
-
SHA512
8ced25e381a3213bb4763fdbd32f3d56f1b9d6534589f94ba628b4a088a4ca91acde1b2cb36e433fe46bb852cb33e1ab9f4342f54707520b1e747b712cccc404
-
SSDEEP
1536:DeNi/Ft9XToeDgMDFca7EQ2lC2idDqwqemI5oQO:De6oeDpFV79CC2idmVeBLO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e55c43f2a4ab506ef8538ab0f5c95ea_JaffaCakes118
Files
-
0e55c43f2a4ab506ef8538ab0f5c95ea_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
Size: 55KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE