Static task
static1
Behavioral task
behavioral1
Sample
35ae0eb3a1737239f58df9d75fd2d7e8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
35ae0eb3a1737239f58df9d75fd2d7e8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35ae0eb3a1737239f58df9d75fd2d7e8_JaffaCakes118
-
Size
43KB
-
MD5
35ae0eb3a1737239f58df9d75fd2d7e8
-
SHA1
e09dcd2c3987a396de27d8636365434b81046d27
-
SHA256
8ff80abe936515d071bc8b7cf763ba685923880338421c3c8e873d47cf8b1b3e
-
SHA512
567ccf4b5d12ce5700614e3c12ba241c1788f35b2e3ddfc8e59f1333c1ef8a4153f55be463e234de3de5f4f79ffef03cc7996b3b5346cda03cc484363714eca3
-
SSDEEP
768:htzcmC3QPe+J4kcVvXxUn6dtJA48o3dhH/GLrY2bj06QBegLJP1l6wIj3g/+:8Am+8mn6dtJA4l3dheP/06QBZ1TL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35ae0eb3a1737239f58df9d75fd2d7e8_JaffaCakes118
Files
-
35ae0eb3a1737239f58df9d75fd2d7e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 41KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE