Static task
static1
Behavioral task
behavioral1
Sample
1ac1cf8419de4574f9dfb56f0374c906_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1ac1cf8419de4574f9dfb56f0374c906_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1ac1cf8419de4574f9dfb56f0374c906_JaffaCakes118
-
Size
52KB
-
MD5
1ac1cf8419de4574f9dfb56f0374c906
-
SHA1
e1a079c3c7ad7ef9eb5754bbeaa96f037be8dc04
-
SHA256
6ce2283bbd09187372519197d654fcee3885e60619212e04ce03aa17c150e6b9
-
SHA512
a90268133b35024ab7ff989bcb656632c5e973cea6c51c57293b535089973ae97214056dfc15d81c0d08cb99e44fc982981d5e2c431e8ee95c79dff3d55fe32a
-
SSDEEP
768:M3H0trZlLXtQTLKv5iRozv04NoPlfIo2hg8Q8OUOugwl5KNJMoSyaoCovTZ:MkrTWnkHzePFv29td9N+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ac1cf8419de4574f9dfb56f0374c906_JaffaCakes118
Files
-
1ac1cf8419de4574f9dfb56f0374c906_JaffaCakes118.exe windows:1 windows x86 arch:x86
5e58d0c080fff3efd1b29d3331696cd7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
Sections
�ɨ�}�W Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�@뼃�� Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
˃l�ݺ"� Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ