Static task
static1
Behavioral task
behavioral1
Sample
167aa1244ff1a5df9946928eaf2db389_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
167aa1244ff1a5df9946928eaf2db389_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
167aa1244ff1a5df9946928eaf2db389_JaffaCakes118
-
Size
8KB
-
MD5
167aa1244ff1a5df9946928eaf2db389
-
SHA1
9c257f2dc745643349b66bcce9322e33db63abb4
-
SHA256
0e226c3b556ecc65ec085f70228cf93fab678fd1b27f8631fe15a04caac1506f
-
SHA512
2203348583332262f5745bd34f4f06f6af8c6d21a8659b9b431ade78b896092a9db4d428c2bbb5852dc4a8ecd227fff2a0d2772ab98e69f8b35fafe3f13ce4dc
-
SSDEEP
192:k6mc1Zl2eVAf+xl1THsaxgzgWGDPFxdhLbBnQAzX:k6mcMKxDTH/CmT5B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 167aa1244ff1a5df9946928eaf2db389_JaffaCakes118
Files
-
167aa1244ff1a5df9946928eaf2db389_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sections
.text Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE