Static task
static1
Behavioral task
behavioral1
Sample
256ed4212e8cfd90df6152458a1c6047_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
256ed4212e8cfd90df6152458a1c6047_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
256ed4212e8cfd90df6152458a1c6047_JaffaCakes118
-
Size
52KB
-
MD5
256ed4212e8cfd90df6152458a1c6047
-
SHA1
d37e225e2beb9f76913360812aa78973a7982543
-
SHA256
e05d38e78f9c70da4c8800808fd788ec2c4106a96ebf201cfaad5d3a164ce290
-
SHA512
f88c0a4285183b0f1f9772d8f5323fe9d85a0948e990a60ad8668f48846ba7c50eaee892b7617976ec2cbcdc713fb5990f3b66cbefebea02974618f01c33aa79
-
SSDEEP
768:hQGfqPAF7XK4bboI4sh0n53/KCYcaL3B7Ix2uAfLiox613taKYYU:1FzbboI4sho53/KCYHL3RiAfLi7aKYY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 256ed4212e8cfd90df6152458a1c6047_JaffaCakes118
Files
-
256ed4212e8cfd90df6152458a1c6047_JaffaCakes118.exe windows:4 windows x86 arch:x86
5e58d0c080fff3efd1b29d3331696cd7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
Sections
.text Size: - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ