Static task
static1
Behavioral task
behavioral1
Sample
191eb9bb8c06d1c79ce8e57ed53071b9_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
191eb9bb8c06d1c79ce8e57ed53071b9_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
191eb9bb8c06d1c79ce8e57ed53071b9_JaffaCakes118
-
Size
18KB
-
MD5
191eb9bb8c06d1c79ce8e57ed53071b9
-
SHA1
3636f2da70d2b5d52c10f85f172f9b5ebc48cec2
-
SHA256
dfc6c337a19f24be3bbb58df2f9e1db4f1381d4816513d4b9a0cfdae41cb2fa6
-
SHA512
7823b4759b7259d204ade15d28b68ac23aac15f1efdc5fda2d128d02723df902bb35c5d8fa35a6affe0323cd9cc537d1859b0bca6bb55c74b3a40efb37d943c2
-
SSDEEP
384:r4KRIL/fnM2ocPSGlbFuVM2o5ynpxep/:yD/75QMsm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 191eb9bb8c06d1c79ce8e57ed53071b9_JaffaCakes118
Files
-
191eb9bb8c06d1c79ce8e57ed53071b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
00bc7a4e1a630a3e81d20014593aa4ca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GlobalAlloc
CreateFileA
ReadFile
CloseHandle
ExitProcess
Sections
.text Size: 1024B - Virtual size: 598B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 220B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ