Static task
static1
Behavioral task
behavioral1
Sample
70ddbdd5f9dbefbd2e4c1d12ac9aad60_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
70ddbdd5f9dbefbd2e4c1d12ac9aad60_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
70ddbdd5f9dbefbd2e4c1d12ac9aad60_JaffaCakes118
-
Size
130KB
-
MD5
70ddbdd5f9dbefbd2e4c1d12ac9aad60
-
SHA1
e0bafa015e0f639df4ffa61d92eef2c0e29fd429
-
SHA256
13762f56f0e35995d5f5da51ed59be1ad8af67da2940bdb9582bd36024e87538
-
SHA512
df0317b675a07fec069a9b00bc7b4fa3160bc611de2fc06d9decb0f9ef852e1941ed95c7c6d7a2f85bb8c9fdd38ca45ddeaa73747f352cb16cc282bed30aadad
-
SSDEEP
3072:VlFB1UyLFB1UyKNb+Hw4f6DECIkp3iwNM7jQRnbNTgdh8Ux1c:SNb+HrMEDk7M7sRBiC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70ddbdd5f9dbefbd2e4c1d12ac9aad60_JaffaCakes118
Files
-
70ddbdd5f9dbefbd2e4c1d12ac9aad60_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rawdat Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE