Static task
static1
Behavioral task
behavioral1
Sample
32633e47f35ac9326d1087aae7668e25_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
32633e47f35ac9326d1087aae7668e25_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
32633e47f35ac9326d1087aae7668e25_JaffaCakes118
-
Size
4KB
-
MD5
32633e47f35ac9326d1087aae7668e25
-
SHA1
ba344b293dc00adb0191a530a85b15a36d91268b
-
SHA256
943f3ce7d92ba0b3eed6e5dea53b8bf341bcd353751e19c9c83024d10bd9a158
-
SHA512
a582ee77ee83ac8c99bcf9101bae57d4dc5b95a3a73048258abead4e4734ccb622286400d7a0b1dbf5d12e5ce2fd4841ca4f316c6998560f27fb2261b2993bd6
-
SSDEEP
48:61a8kv/JKbwHEyJjuBkRno9Inr8ZfFYW:YkH1EHqRno9B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32633e47f35ac9326d1087aae7668e25_JaffaCakes118
Files
-
32633e47f35ac9326d1087aae7668e25_JaffaCakes118.exe windows:4 windows x86 arch:x86
efc9afde7c4e462f0f399a8bb81a6058
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLDownloadToFileA
shell32
ShellExecuteA
kernel32
ExitProcess
Sections
.text Size: 1024B - Virtual size: 906B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 218B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ