Static task
static1
Behavioral task
behavioral1
Sample
1726540cd1938874a27f6c09855f2d79_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1726540cd1938874a27f6c09855f2d79_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1726540cd1938874a27f6c09855f2d79_JaffaCakes118
-
Size
13KB
-
MD5
1726540cd1938874a27f6c09855f2d79
-
SHA1
2b06605e8feba1220119aa97e3f0d1e5195eac99
-
SHA256
96604453d5c41848cd2aa3855a66c47461863fcfcaa023862ff5b8df65ee4cad
-
SHA512
5a4db465cf8dc886dfb6d23b83ed9b58c7207ac84b888ebfddd83e7ca900076a43a291be09d343a1beaea7dc5fed0146e307e20e0204b332b49753eb9c1752f2
-
SSDEEP
384:izs8xmCRoEQ3PIcI8EEPBSftkeE2SJaLZ:E8O6PeEPkftkeV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1726540cd1938874a27f6c09855f2d79_JaffaCakes118
Files
-
1726540cd1938874a27f6c09855f2d79_JaffaCakes118.exe windows:4 windows x86 arch:x86
b71d8c1931cb0a297806c1529ed52c6b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ExitProcess
FindFirstFileA
GetCurrentDirectoryA
ReadFile
CloseHandle
Sections
.text Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE