Static task
static1
Behavioral task
behavioral1
Sample
1a0e608b2e18e45a1e23a50aaca6be38_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1a0e608b2e18e45a1e23a50aaca6be38_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1a0e608b2e18e45a1e23a50aaca6be38_JaffaCakes118
-
Size
42KB
-
MD5
1a0e608b2e18e45a1e23a50aaca6be38
-
SHA1
d6586794ed447a7f7bc3c8cf62292e6548503be1
-
SHA256
6e57cf7c309e8bfc4973dc9e5c487f9dbf62a9f79512814f581413541669ec7b
-
SHA512
c7645ef51dfe03d297a6ddb6ca142a031ce83b3941a1537e3d8e33d0007662bf1f727c75c77dd4a0baca5f59caeec1796f51c03e550bddc69dabb448803fb46f
-
SSDEEP
768:v8+c3upxI6e6EKXEcxklaxpWsqFCZWrYceMxq7g24QShzN75elG:v8nwzXEcqAxpWsqtDRxqcjRruG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a0e608b2e18e45a1e23a50aaca6be38_JaffaCakes118
Files
-
1a0e608b2e18e45a1e23a50aaca6be38_JaffaCakes118.exe windows:4 windows x86 arch:x86
9b9d7dec49cd15d34571420063895e52
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
strcat
strcpy
strpbrk
strtol
Sections
.rsrc Size: 35KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tlss Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tlss Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NewIT Size: 512B - Virtual size: 127B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE