Static task
static1
Behavioral task
behavioral1
Sample
267a4946250cf54a57ed555917048bc1_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
267a4946250cf54a57ed555917048bc1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
267a4946250cf54a57ed555917048bc1_JaffaCakes118
-
Size
50KB
-
MD5
267a4946250cf54a57ed555917048bc1
-
SHA1
de9081db6f8164c55f60ae0cd4728886e3ed5eca
-
SHA256
d0ae982c1c31945246231a6a5af82e3d672b15ae5f3d7e6acb5fb847b1cbcba2
-
SHA512
fa0f455fc15c1051f516338b3852201a8d42b5896de608252b0238e9f3b20f97623d5a33c1bb4cb5a27b1dc6f306f768e9f7a7f4703e655fffe56bb7c6aa9e28
-
SSDEEP
768:nde4uzqdxk5lyUci3QZAHxakKywln8dKd3UQIZZxMWLSmLJJsl:de4Ieujci3QZAH6HpL3UQgombsl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 267a4946250cf54a57ed555917048bc1_JaffaCakes118
Files
-
267a4946250cf54a57ed555917048bc1_JaffaCakes118.exe windows:4 windows x86 arch:x86
51c4e98e76bd946f81a1a9c26b55ce8b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ord1
Sections
.text Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE