Static task
static1
Behavioral task
behavioral1
Sample
695c419c162110d9bc0b36b97f48cd4a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
695c419c162110d9bc0b36b97f48cd4a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
695c419c162110d9bc0b36b97f48cd4a_JaffaCakes118
-
Size
47KB
-
MD5
695c419c162110d9bc0b36b97f48cd4a
-
SHA1
ddcb05a11d87177c065a97ad1462df4f5bd61b1f
-
SHA256
bf4a66c1cf9c5538daac3507941676903c2f73862f71cf93cb2a1d40b42028c6
-
SHA512
70d12d0626cf65aff631ca6e4338036fe4fe6e3b47915202a3a6f0c046b1c15844395c4b8b4a59571aecf5bc60bc416a6dc5b95ad19b0ef00295487c38661e17
-
SSDEEP
768:LwvmgB9SVABjIxnq6J48Xj4hzOK92HPI2tGrU8aIPXJnKNxcPoro6sbGrQmV5:EviWJIlJfXjmbmPIsGI8aUUNrHsbmD5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 695c419c162110d9bc0b36b97f48cd4a_JaffaCakes118
Files
-
695c419c162110d9bc0b36b97f48cd4a_JaffaCakes118.exe windows:5 windows x86 arch:x86
86df90893cd6ff749f20491ed4a2f8f6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
UpdateResourceA
VerLanguageNameA
gdi32
GetMetaFileA
shell32
StrChrA
Sections
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 286B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ