Static task
static1
Behavioral task
behavioral1
Sample
21359cae7f2c11beae3bf96a6c1f77bf_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
21359cae7f2c11beae3bf96a6c1f77bf_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
21359cae7f2c11beae3bf96a6c1f77bf_JaffaCakes118
-
Size
129KB
-
MD5
21359cae7f2c11beae3bf96a6c1f77bf
-
SHA1
43a8e5410d8fd33db1a0ac857cdeb2c22059dce1
-
SHA256
921add9097fc30572445683bc0c078972ced58a6d283d7bcce7823125d365df8
-
SHA512
f05f227d68a7792f5126893aad1dcc8961dbfc320db6f8ea7a96a866b4d91386265d8d4c13075fe7c0cf1cc1bca20fa0aa268a4b60b63c619712fea2cd9fb05f
-
SSDEEP
3072:WZ3Is3C8nikS3bOGDz1DXsjGsSNYtd0bqSLmDGO76A99+:WZ3aSinN/1DXsjGSdeCqO759+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21359cae7f2c11beae3bf96a6c1f77bf_JaffaCakes118
Files
-
21359cae7f2c11beae3bf96a6c1f77bf_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rawdat Size: 116KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE