Static task
static1
Behavioral task
behavioral1
Sample
247b6198d9f285d9610b038e2980ff8f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
247b6198d9f285d9610b038e2980ff8f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
247b6198d9f285d9610b038e2980ff8f_JaffaCakes118
-
Size
17KB
-
MD5
247b6198d9f285d9610b038e2980ff8f
-
SHA1
b62626365fdeff4aa5aeb70d1c135e1d3532794f
-
SHA256
1d41ea76a6b7b8e389f83f133e6a82ca2cfc707a51baeba1c386d7e82f7560f5
-
SHA512
ab23c85969ed66b31f19911e16510671ca9d225006f46f8e64843234ac65e790a51b672cccf9e64d5291b81c45fe7ce08d7928ce79b7eee06f9aa28036b42419
-
SSDEEP
384:xIPaacHGctHu5vGoVTtwuvLFcp6XXLkMb39Xlq/w8VKjX5PjX6KjX1ShjQI:xIS/mWHu5vGoVT2uvGpQXQgVKwMK75PW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 247b6198d9f285d9610b038e2980ff8f_JaffaCakes118
Files
-
247b6198d9f285d9610b038e2980ff8f_JaffaCakes118.exe windows:4 windows x86 arch:x86
d76f4237a8ae158292f09835997a1d9f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
Sections
.text Size: 1024B - Virtual size: 969B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ