Static task
static1
Behavioral task
behavioral1
Sample
354e1dd3856dd3584b8ea78e335f6392_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
354e1dd3856dd3584b8ea78e335f6392_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
354e1dd3856dd3584b8ea78e335f6392_JaffaCakes118
-
Size
4KB
-
MD5
354e1dd3856dd3584b8ea78e335f6392
-
SHA1
ee4be55bf14066a71a6086fc7c9f797d76fac7e1
-
SHA256
445e7fcc2cab8cf4762ed2a6c2a27b52618fab097530b2766af575b3519e7994
-
SHA512
8627f06998eedaeac4e7930abbd236ee5bcc3ae918fccb890e0e9c138b3ebbf6b69861eacb4a0789096c5261b1353eb3abc828af520848c769ad430be77c3b1b
-
SSDEEP
48:64lslgIIBmH25j5tsVLE0UyT58ux2uJrSz0RXu7HqO:E2cWd5tYE09T58ux2us0Vu7Hq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 354e1dd3856dd3584b8ea78e335f6392_JaffaCakes118
Files
-
354e1dd3856dd3584b8ea78e335f6392_JaffaCakes118.exe windows:4 windows x86 arch:x86
ee6564f46ebf19bb9d6c36c49b3757f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
Sections
.code Size: 512B - Virtual size: 90B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 30B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ