Static task
static1
Behavioral task
behavioral1
Sample
288030f833cdcccc50a94737b49c293e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
288030f833cdcccc50a94737b49c293e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
288030f833cdcccc50a94737b49c293e_JaffaCakes118
-
Size
44KB
-
MD5
288030f833cdcccc50a94737b49c293e
-
SHA1
71d21ed3b8cc7235b368adad71c2ea2d8d11bd0d
-
SHA256
65f805fd182566d7556c6f3e3ed505b485c27f1040431ede6cebe218ffd5a589
-
SHA512
c19cd7f1dd6adf382cd81c598c75b1223d1558d83b396a86fc893c3308a50d9d444e57f9c3aac6f2f3228a327a455fd251d4e436c07f0a77fb08c6648a8eb455
-
SSDEEP
768:B+YQawOXQmTeKS5Ck0hfFJha1On9xF3qHvafpb6fw9ozv/s2l2Rn+s49xq8/bnpx:B+bawkQAeK+Ck0h9i0n9xFaHvaM1rsOQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 288030f833cdcccc50a94737b49c293e_JaffaCakes118
Files
-
288030f833cdcccc50a94737b49c293e_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_TEXT2 Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE