Static task
static1
Behavioral task
behavioral1
Sample
319a97c0eb8e20056c8144c508428363_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
319a97c0eb8e20056c8144c508428363_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
319a97c0eb8e20056c8144c508428363_JaffaCakes118
-
Size
7KB
-
MD5
319a97c0eb8e20056c8144c508428363
-
SHA1
433d176f06eab2f5d2047e6dc2e6084f7f4575fe
-
SHA256
b34b870f49918f21e3bc8696f3469f3a671398818da5c42f1ff321a89a60bcc0
-
SHA512
1d2176bbfe65f300f0ebdb476eeb678cb72026805484aa84b8e47e79dcaeb721593755744ebe247dbc7634c6f2dbb29b3eb7c20d90dcb7caff699764664a67dc
-
SSDEEP
96:occgZCGElAhhWQJdoaOM4HuEcXlJmj5dwjZ:ocf5EofoaOHHcXlie
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 319a97c0eb8e20056c8144c508428363_JaffaCakes118
Files
-
319a97c0eb8e20056c8144c508428363_JaffaCakes118.exe windows:4 windows x86 arch:x86
2eda502d39734c2a70c5e0d029966397
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
ExitProcess
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE