Static task
static1
Behavioral task
behavioral1
Sample
236dc3d6f70d2abe443b07f7a3cf1f95_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
236dc3d6f70d2abe443b07f7a3cf1f95_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
236dc3d6f70d2abe443b07f7a3cf1f95_JaffaCakes118
-
Size
107KB
-
MD5
236dc3d6f70d2abe443b07f7a3cf1f95
-
SHA1
6509eee1b1aba8e712c3d9bb1682ad14581b08a4
-
SHA256
3a1ebc43a751a6e99973bb22dca8296d42dccbcf82f365f1f4ba22052301d263
-
SHA512
06b2a0f308ba4a92afde8c38351016bf9618ec0d46abd7b8c412f9b49a85d4e7ebbe6be8447c02c8f2a40cb508d9402795c9caf54ac102d5a0468b3eb3eab016
-
SSDEEP
3072:SYBOIZxCBMH7bapfRZKY1JJrb0YKfmt8t7:D8avapBJJrb0zuG7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 236dc3d6f70d2abe443b07f7a3cf1f95_JaffaCakes118
Files
-
236dc3d6f70d2abe443b07f7a3cf1f95_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rawdat Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE