Static task
static1
Behavioral task
behavioral1
Sample
292cdf1bb82ab93b77535a2bd42ce59c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
292cdf1bb82ab93b77535a2bd42ce59c_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
292cdf1bb82ab93b77535a2bd42ce59c_JaffaCakes118
-
Size
23KB
-
MD5
292cdf1bb82ab93b77535a2bd42ce59c
-
SHA1
4eb3ebd0bfd89383b84518bfc40491817aa738f7
-
SHA256
742b2993488d044ab3d65f1a2fabc6f1d441223921d2467473621cfc2ddb8ce9
-
SHA512
ab00f17510f18c0c0e541d37e206bf9eea8fd37b5f8a6f5c601a21f8cb965c0b1de394ed8190b99f57d58d0515393bcb1feb73b488e5560ca2884b889e609b6a
-
SSDEEP
384:yysOJTcZhPP5y48aS7sb24z2u42D976j+Bomg4TGyfXg0UND:TT8R5yTaosNnZ7kcomg4Kx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 292cdf1bb82ab93b77535a2bd42ce59c_JaffaCakes118
Files
-
292cdf1bb82ab93b77535a2bd42ce59c_JaffaCakes118.exe windows:4 windows x86 arch:x86
35347c755519b7d0311887e16c6cc7d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHAddToRecentDocs
StrRChrIA
StrStrIA
kernel32
CreatePipe
TerminateProcess
VirtualProtect
Sections
.text Size: 13KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ