Static task
static1
Behavioral task
behavioral1
Sample
174062ed6594902291b2c006f802ef30_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
174062ed6594902291b2c006f802ef30_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
174062ed6594902291b2c006f802ef30_JaffaCakes118
-
Size
43KB
-
MD5
174062ed6594902291b2c006f802ef30
-
SHA1
8fc3a6e54e35d7ee421b84ab374d6e6a51c9da32
-
SHA256
adab4310bdff70e1c6cc133469a77e6c227555d30fa9ad08a9a855f65d548736
-
SHA512
bd1ea60c056fad3609fa832281f4b40dea511baf43a9098951052f9adaa81ed280a161e521b09f2fd47edbc6f4ed04b3b77d074483fc00ff571c754912dd5e3f
-
SSDEEP
768:onfdy5T4NzOQZhecMeGGCk1N+mWoDjFW3hfzhC05JgMjowprmsdvi7wBoYWuUt/x:m1y5UNzOQZhesGdkZWyFWJh7DJEqrHd2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 174062ed6594902291b2c006f802ef30_JaffaCakes118
Files
-
174062ed6594902291b2c006f802ef30_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 41KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE