Static task
static1
Behavioral task
behavioral1
Sample
1710e34997f9942bf1a81a367aa43c52_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1710e34997f9942bf1a81a367aa43c52_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1710e34997f9942bf1a81a367aa43c52_JaffaCakes118
-
Size
16KB
-
MD5
1710e34997f9942bf1a81a367aa43c52
-
SHA1
c7d54e981b8fbec6ebd0480575351a72e422fc16
-
SHA256
a34f7bf57c036842843758e4a22fe291453e4d8e507a11408f24c54a2939d695
-
SHA512
e8080ce42bcbb258ab841ed81e9396cf6628f8e9d3f1c67d4f8085b8725c8a9a11cceb60dcc6c57a2ad35b7cc68fdaf6d134280b002c7527de8ba419d7c16668
-
SSDEEP
384:06Ut3/2MAAFSEQ714femSR7wcEX2lsb7:K1/kKZ0bO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1710e34997f9942bf1a81a367aa43c52_JaffaCakes118
Files
-
1710e34997f9942bf1a81a367aa43c52_JaffaCakes118.exe windows:4 windows x86 arch:x86
69848ba2fad42e9c181ad1835b41eae0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
GetProcAddress
GetModuleHandleA
GetCurrentProcess
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ