Static task
static1
Behavioral task
behavioral1
Sample
31e9a8709755cfa2ba79d46ad9bc9f8c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
31e9a8709755cfa2ba79d46ad9bc9f8c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
31e9a8709755cfa2ba79d46ad9bc9f8c_JaffaCakes118
-
Size
59KB
-
MD5
31e9a8709755cfa2ba79d46ad9bc9f8c
-
SHA1
2388a2c9e4d40e501ba78d14e0210ca7196e7a50
-
SHA256
75d7e398e8621cb201c383608729a562dff1f0e3403c0f695011839aa8e57bfd
-
SHA512
013ccaeb21e842d3a8181748b403663523a584b4d7d653ca61d456dc50126f7b98dde32e824b5c2f7d6aa232ce3f27efe2ba9eec024402970ead8bf12007bf91
-
SSDEEP
1536:/b73EadQAorjvH2ALPiqRfkcCwHODT01:/3Eqjo/P2iPiSfaDT01
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31e9a8709755cfa2ba79d46ad9bc9f8c_JaffaCakes118
Files
-
31e9a8709755cfa2ba79d46ad9bc9f8c_JaffaCakes118.exe windows:49343 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
aybayzji Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ajizbqaj Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qrzqyjaa Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
arizarrr Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ