Static task
static1
Behavioral task
behavioral1
Sample
234948c5f9177199c3b2500f6429e9d9_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
234948c5f9177199c3b2500f6429e9d9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
234948c5f9177199c3b2500f6429e9d9_JaffaCakes118
-
Size
61KB
-
MD5
234948c5f9177199c3b2500f6429e9d9
-
SHA1
0d0db27f9095e6f14f993955fc68d1a045286ee7
-
SHA256
1fa363ace2870be6551ddbb31f9c68a5d40236fd5c29f2a6cd3019a1d0997c9a
-
SHA512
838652fadd4ad9520a85c8d983408f5b16da4fa117de70412ad387dc3271ee18e6b12ba52cd0af4926c8fe1bddc0f293237ac85ccc757293f138fea26c32dd8b
-
SSDEEP
1536:QtQJpMwp+bRIajFxn4D+NdPrDXHqYMup+4NEG7:Qt4ppp+bRVxnI+frD3+yEG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 234948c5f9177199c3b2500f6429e9d9_JaffaCakes118
Files
-
234948c5f9177199c3b2500f6429e9d9_JaffaCakes118.exe windows:1 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE