Static task
static1
Behavioral task
behavioral1
Sample
64e882fd8027375f651bd44baa546f84_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
64e882fd8027375f651bd44baa546f84_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64e882fd8027375f651bd44baa546f84_JaffaCakes118
-
Size
19KB
-
MD5
64e882fd8027375f651bd44baa546f84
-
SHA1
c5afaca863d4f851d52550580757404da4eeef91
-
SHA256
806d3902fe3a0224be78ef2a809eb92add933fb9a42b3512baab1a7fc0d80d69
-
SHA512
983502733261ae23f3cb3f8d94caced6c60229eec368bdd86758bdf9641f76382b3ce4657e9e0bc3783b6a4121a036d81e7a8f6dfb3937024410198764adacb2
-
SSDEEP
192:Vj35zZ/+77qURlruEzglhirWfTZY1MZuT6u:Vj35zd3URlRQirWfWmuT6u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64e882fd8027375f651bd44baa546f84_JaffaCakes118
Files
-
64e882fd8027375f651bd44baa546f84_JaffaCakes118.exe windows:1 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.spack Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DAStub Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE