Static task
static1
Behavioral task
behavioral1
Sample
225565d89b9a37d9a629544331d31a8a_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
225565d89b9a37d9a629544331d31a8a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
225565d89b9a37d9a629544331d31a8a_JaffaCakes118
-
Size
23KB
-
MD5
225565d89b9a37d9a629544331d31a8a
-
SHA1
3c9d9469aeb2181107453f998eedf5447a139e0d
-
SHA256
a9d1fa5a9c39207c3ba79827b78ea4e71de0ef547c03a9d5704a9f0bc54260c4
-
SHA512
d1fe9a726fd6deeac32b5cb60db07b9a30b5e04e4d81ec642eca7827fbba114157d7b7b6c222ca09b2784e2e290eab0aeb9ab13b6bc3c4cab2ea5adb740b509a
-
SSDEEP
384:n1dvQHm9GPfUwh00Lh+8ihOxAIULGzZA5kW/iVHfiRe2TtTWAKuWfYSwh:nPQHmkPcw3Lk8vhUie5di5iRe2TtTfFo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 225565d89b9a37d9a629544331d31a8a_JaffaCakes118
Files
-
225565d89b9a37d9a629544331d31a8a_JaffaCakes118.exe windows:4 windows x86 arch:x86
b7aa5ad21fef535197ce43d189c00604
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteAtom
Sections
��ͩ�� Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Q�#+�<*� Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�KKV�C� Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ