Static task
static1
Behavioral task
behavioral1
Sample
717949d43e8a505f1c91b9f87252c764_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
717949d43e8a505f1c91b9f87252c764_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
717949d43e8a505f1c91b9f87252c764_JaffaCakes118
-
Size
12KB
-
MD5
717949d43e8a505f1c91b9f87252c764
-
SHA1
3a375df3aabd14e045f65c46057286e6dd28abdc
-
SHA256
d2fc1bf41a1304f276cb14fb58e6c9d7d2236ba6a4e0102d51252be702adedc5
-
SHA512
5f5fb2086de936d7f4027ed8bffcf4296b9abb97f0f13b42d3ace14f579ab0a095d0698acc803d6950bfe12e3a725fc10f2a4626e5904759df62ecd45a8b329a
-
SSDEEP
384:ZSpt+Ohzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzb:so
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 717949d43e8a505f1c91b9f87252c764_JaffaCakes118
Files
-
717949d43e8a505f1c91b9f87252c764_JaffaCakes118.exe windows:4 windows x86 arch:x86
eee538f3be92ca3862e32deb50976e37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
Sleep
user32
wvsprintfA
Sections
.text Size: 512B - Virtual size: 236B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 202B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ