Static task
static1
Behavioral task
behavioral1
Sample
21d602f74e714bedb53490335b0980db_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
21d602f74e714bedb53490335b0980db_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
21d602f74e714bedb53490335b0980db_JaffaCakes118
-
Size
18KB
-
MD5
21d602f74e714bedb53490335b0980db
-
SHA1
94983e143b7ac18bb9a54c2bb1ff9e8ad241f8b3
-
SHA256
f64c955b38e0b8bb2f65d415958e2a19d0677b2fdbdb6422e83da27e19d469c3
-
SHA512
6af2bda00a67b4257b55fdb757d2f0aa38e5645580a8b59796ff67d246f262e45a4e35d97f49745993eb6eb46180406875944b8c2c511e7e8f3f5ebf04296825
-
SSDEEP
384:DiCsfvZLN4wkXS8n5msElPMX2yQ32+B33PyhX5PUHILfh7:DiCUNMS8nksIp3uJPUHIbR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21d602f74e714bedb53490335b0980db_JaffaCakes118
Files
-
21d602f74e714bedb53490335b0980db_JaffaCakes118.exe windows:4 windows x86 arch:x86
f35da0feaeb1ea3121dbe4b43d43d5fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntExA
kernel32.dll.
LoadLibraryA
Sleep
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE