Static task
static1
Behavioral task
behavioral1
Sample
1a8baa87b79b10e213d42d525e353646_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1a8baa87b79b10e213d42d525e353646_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1a8baa87b79b10e213d42d525e353646_JaffaCakes118
-
Size
21KB
-
MD5
1a8baa87b79b10e213d42d525e353646
-
SHA1
fabb7d51e8a54b9f737820ca40b444fa190e90c7
-
SHA256
1825025b4ec1c0a25f8d8d2ef11be4a7c7a7fb37d6cf8eec021a83031220f0fc
-
SHA512
9ff08085580b9a55fa5090861658027733f572b6d20fba21750b43b1aef6140146093f354708adeb802805ca42a007719cc164257c03666717f9c6d30f4c0b99
-
SSDEEP
384:ThWMGj//J8Va2ZzXaS+romwUIRYie4+atY6mPYZ8JqrazbevXon:TIMGjHaAIXaS+romvIw47QTzbevXo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a8baa87b79b10e213d42d525e353646_JaffaCakes118
Files
-
1a8baa87b79b10e213d42d525e353646_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
kkrunchy Size: 17KB - Virtual size: 270KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE