Static task
static1
Behavioral task
behavioral1
Sample
602b907cded92c9686966b36fb3fe094_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
602b907cded92c9686966b36fb3fe094_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
602b907cded92c9686966b36fb3fe094_JaffaCakes118
-
Size
23KB
-
MD5
602b907cded92c9686966b36fb3fe094
-
SHA1
45dba89dd4c11fba3e2113c54fcdd4c100730ac0
-
SHA256
ebf668547218c939065308dbf566f93629ed88d068230fcf2ab7e8b141a1f58d
-
SHA512
f8906a0fbd468d37e9f95a5f433a4d48083fdb8eef596ec7dbf4e2bcd1c391b2516be33703d4ea0e977d8146246fa05b34b29d52219f5a046e343f584f1743b8
-
SSDEEP
384:JNJMP3s/8o98CGIwkcXrrT3yDtxtoEBK0jhyuHTriz+P9bDD/JEzOBSw:vWEZ98eReyZx+l0oKriCPRDL+zOBSw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 602b907cded92c9686966b36fb3fe094_JaffaCakes118
Files
-
602b907cded92c9686966b36fb3fe094_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
����t Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����ta Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����a Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE