Static task
static1
Behavioral task
behavioral1
Sample
76d6fc461c6c11ba3ba3af8b746ebab2_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
76d6fc461c6c11ba3ba3af8b746ebab2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
76d6fc461c6c11ba3ba3af8b746ebab2_JaffaCakes118
-
Size
6KB
-
MD5
76d6fc461c6c11ba3ba3af8b746ebab2
-
SHA1
a4a3a2660687776e4c82fd941eea6f96ed7f27de
-
SHA256
0093aa6bd0408d41696f244fe30543b07cc56daecf0bf987c8bfb1f64e9b2a1e
-
SHA512
1b7ced1c2fc641a99329b23dc391ac68dc5927d5c57837c1263afec81d4ef4d5d302b9c8d4d6dfa8e83cb5cfd5acd99a8aac8c1b9b3ce6c7f28bcb8bb442591f
-
SSDEEP
192:+GAEUu0/J7mfEIRVAA6H0H2uLQ9jqXh00z941Y1:AEE7AxHHMjqXu0zr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76d6fc461c6c11ba3ba3af8b746ebab2_JaffaCakes118
Files
-
76d6fc461c6c11ba3ba3af8b746ebab2_JaffaCakes118.exe windows:4 windows x86 arch:x86
81c2cf7e214d567b43c7f9ac8fc45d97
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
IsDebuggerPresent
Sections
rsEnt Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsEnta Size: 133B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE