Static task
static1
Behavioral task
behavioral1
Sample
240f31c6e3becebcdd6e11b3a139ca45_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
240f31c6e3becebcdd6e11b3a139ca45_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
240f31c6e3becebcdd6e11b3a139ca45_JaffaCakes118
-
Size
64KB
-
MD5
240f31c6e3becebcdd6e11b3a139ca45
-
SHA1
ac11e0a7ce5ad6b82faf97b3f4fb1208176b024a
-
SHA256
e2c1f1b539349d519a6a6ebbcd2ff0b796ac56f2b64aa9796a058d9ba5294df2
-
SHA512
7e0f87bd48f5faf36bc6e3d51b08f80b8b4de774f80c4c5387a63a00110c2354ebe2e17f7d55865ec59af46556040b5ae3316357ca00cedcabc242641ced714c
-
SSDEEP
768:LTpZcG7CBzSzXqACVzbD47JBjXDu3dMEiULn:HPY4C149ZEi2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 240f31c6e3becebcdd6e11b3a139ca45_JaffaCakes118
Files
-
240f31c6e3becebcdd6e11b3a139ca45_JaffaCakes118.exe windows:1 windows x86 arch:x86
e82dd51b077167be63c004bed23d0c1e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
Sleep
Sections
CODE Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 61KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE