Static task
static1
Behavioral task
behavioral1
Sample
616abd201c359671122bc046b02e6c74_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
616abd201c359671122bc046b02e6c74_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
616abd201c359671122bc046b02e6c74_JaffaCakes118
-
Size
199KB
-
MD5
616abd201c359671122bc046b02e6c74
-
SHA1
7e3e049472801f076fedca875b333c7c4fe85bbf
-
SHA256
db02943a8665546a5ae9527e884b1f8adef1c848d76894793078e63d9486f5c3
-
SHA512
e1cacd9b9df4bcac611b73253e016ff81dc638ec54b7aa9a33321c1591d68688cdd3c62bec01f3c250ccaa122b983c51dfc601b71fd912026df840406a9a97a4
-
SSDEEP
6144:4TyCezRCkMof+lLaaYWIjZCV8HaWy4hNERxQ:4e1dDfkJr8Ha94hN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 616abd201c359671122bc046b02e6c74_JaffaCakes118
Files
-
616abd201c359671122bc046b02e6c74_JaffaCakes118.exe windows:4 windows x86 arch:x86
4d8e9e06f8e51550e3e5089179e9846d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
Sections
Size: 8KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE