Static task
static1
Behavioral task
behavioral1
Sample
32e8e308c7db3187801315e08e6a3e1c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
32e8e308c7db3187801315e08e6a3e1c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
32e8e308c7db3187801315e08e6a3e1c_JaffaCakes118
-
Size
9KB
-
MD5
32e8e308c7db3187801315e08e6a3e1c
-
SHA1
946216ef29eb7cb91912bc505e3aa488d5519cf3
-
SHA256
3230e76e8403b1458013f0dbfa1e7dfef4f3ad7544c7fca1bf19fa3be7d3498b
-
SHA512
8689000310bf64d3253ecb88623768e63cbcb66279db0dc69b119e93027760adfedcd01867cdf593f2d0923d460f979ece2795c79296ec60a9ab3915db89b3ec
-
SSDEEP
192:QO7Y+RX14S/lMM3ghsy/1wSVotPsWLOnCeuojpbMPM:Dsu4S/lj2/1RoxsGOwojpbMU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32e8e308c7db3187801315e08e6a3e1c_JaffaCakes118
Files
-
32e8e308c7db3187801315e08e6a3e1c_JaffaCakes118.exe windows:4 windows x86 arch:x86
028ad07e6447616cbbfef8fe4f6c232a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceA
CreateThread
VirtualAlloc
HeapAlloc
GetProcessHeap
Sections
.data Size: 1024B - Virtual size: 518B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ