Static task
static1
Behavioral task
behavioral1
Sample
309e811768951d903a79c7843feb81a3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
309e811768951d903a79c7843feb81a3_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
309e811768951d903a79c7843feb81a3_JaffaCakes118
-
Size
4KB
-
MD5
309e811768951d903a79c7843feb81a3
-
SHA1
3b944f91333a572207bf794ea797da6133859e52
-
SHA256
1d3fb25dea60ce30c942aaf2892c4cb1cf3a7b7cf7c10e92db30794a798a6900
-
SHA512
23bc491869183e8cdfd328bb3787258e254fa2fefedb708dbaf1bdad2c8cf4a5a2f4d5c33e71ab0ee26d86848fe7e2c50fc09b607dc3fb2e467ca33f3d56889f
-
SSDEEP
48:OEPYS4c9mn/S4lCl50AIo07ZDyM+TMh/DSadtScvgnib4k+bkguj:nP54ZJlCDIo01DyShrxMci6K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 309e811768951d903a79c7843feb81a3_JaffaCakes118
Files
-
309e811768951d903a79c7843feb81a3_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 1KB - Virtual size: 244KB
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
.tls Size: 512B - Virtual size: 4KB
.rsrc Size: 1024B - Virtual size: 4KB