Static task
static1
Behavioral task
behavioral1
Sample
396870745be834ac33dc87fcd5e75a44_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
396870745be834ac33dc87fcd5e75a44_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
396870745be834ac33dc87fcd5e75a44_JaffaCakes118
-
Size
383KB
-
MD5
396870745be834ac33dc87fcd5e75a44
-
SHA1
3159a4957099d5a078a9d7c4ff2885d8a5823af4
-
SHA256
419e9e16793b5ce93c731d390f2e90efe72f1a2a3531fc29058281ced664728f
-
SHA512
459b7aac197e526f6fd7cfc8abb491d566bbba79a811676aba2a230561475d7b2552796b204d8104c13fe9de8fe573c4c6de195464e720b0e2413dd77c386d92
-
SSDEEP
6144:bquvoUA92zkAITOM5WhBTbwGIkcKMnrZYArQQglFW5hIHxSVHepD4lNh:GuwUuAkA/V4kcKMrnrpgiL0sVHepMlNh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 396870745be834ac33dc87fcd5e75a44_JaffaCakes118
Files
-
396870745be834ac33dc87fcd5e75a44_JaffaCakes118.exe windows:4 windows x86 arch:x86
647b2d25b4821905b4195ff7a6455b54
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sections
.text Size: 378KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ