Static task
static1
Behavioral task
behavioral1
Sample
189c8074b28e85dd212e098d2551d95d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
189c8074b28e85dd212e098d2551d95d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
189c8074b28e85dd212e098d2551d95d_JaffaCakes118
-
Size
64KB
-
MD5
189c8074b28e85dd212e098d2551d95d
-
SHA1
d14bf6b11c250742baec1e6a549ca7ff86162c60
-
SHA256
349b365f9c2304b042aff5507bb26ec09d66e1a55e63c7f331f041c6555b3d23
-
SHA512
aa025745ccd0350219e6f9edce1c3970159b8862f8be8abfa7c20080b6347bdfa5a7be2114c0ccc647216e41170827325c14377a5c7f4e0c926b011152b46602
-
SSDEEP
1536:e51R5VBHGqgAR2JpNa8kmx39egFTa3+GQesQxcBT2KxO5:efRl9gAKOmx39zU+JqxcBhc5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 189c8074b28e85dd212e098d2551d95d_JaffaCakes118
Files
-
189c8074b28e85dd212e098d2551d95d_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.avx���� Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE