Static task
static1
Behavioral task
behavioral1
Sample
14e4158e0d4f030a72338572b5bdcb04_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
14e4158e0d4f030a72338572b5bdcb04_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
14e4158e0d4f030a72338572b5bdcb04_JaffaCakes118
-
Size
12KB
-
MD5
14e4158e0d4f030a72338572b5bdcb04
-
SHA1
1a72e2c35a39131445f8ef23bb90f413083fdfcd
-
SHA256
d59ced59dcafe077f379734b029e3d8aa370c5fcb5e6e74fbde98e20cafea7d6
-
SHA512
12625ab59de4e4fe8c64a3c7c25ea4cba5a909e81b63b1bb99909a681c830aaf6a413ebbf610178994f294d1799788991ff9fae1f8c3bc2afca9ccb9c917a9b7
-
SSDEEP
192:gAn0XwohuFUtaeT9mo6YZRARqonXswj6+nm11adOH2bUCQpzu:D0Xe4rqc9onXsE6+GodOWb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14e4158e0d4f030a72338572b5bdcb04_JaffaCakes118
Files
-
14e4158e0d4f030a72338572b5bdcb04_JaffaCakes118.exe windows:4 windows x86 arch:x86
647b2d25b4821905b4195ff7a6455b54
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sections
uyiuyouy Size: 512B - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�ytukuti Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE