Static task
static1
Behavioral task
behavioral1
Sample
271cc80aaca76551bd9b6f41b102a95f_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
271cc80aaca76551bd9b6f41b102a95f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
271cc80aaca76551bd9b6f41b102a95f_JaffaCakes118
-
Size
30KB
-
MD5
271cc80aaca76551bd9b6f41b102a95f
-
SHA1
a5d646cde72004e5b0e873176cf4e3a3fb7c3f1f
-
SHA256
6bf88f87e5347476db059cc2ccedcfa104b013716acea790734aa61b78e1c91b
-
SHA512
1963dc98586d7677ffac8e701b908d26dbaa3c9be05ff9928997f79a4ea7b951035fb08e1aa4ae3b3753c6305529080dca3fa774095e426e2c0b68728f0dfee8
-
SSDEEP
768:AGscNRVS8swN1En4I0SdtjHfoFPYl4lTI8kq51VQ0rf1dbpUXpAk:AGsczVS8dM4I0SCg6TI/q9H1zUXpJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 271cc80aaca76551bd9b6f41b102a95f_JaffaCakes118
Files
-
271cc80aaca76551bd9b6f41b102a95f_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
kkrunchy Size: 26KB - Virtual size: 5.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE