Static task
static1
Behavioral task
behavioral1
Sample
7779d5782d5c99ed41a52814ddd30eac_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7779d5782d5c99ed41a52814ddd30eac_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7779d5782d5c99ed41a52814ddd30eac_JaffaCakes118
-
Size
118KB
-
MD5
7779d5782d5c99ed41a52814ddd30eac
-
SHA1
5baca76020a5e55fafb8f4379be20818c175b35e
-
SHA256
d21bdbbba31c2f74917cb81007ddb8afe9960342e353e2499eb4e4d08e3deb46
-
SHA512
22240f717f2e607b5b3ae2384d7c77ce0b4fc006f6c1a24df3264a9a7e4c79a7e50271802a314100a0f58e404e9fc9b8df1a8efda8359731ae5d802936e3871d
-
SSDEEP
3072:qoKL0Wl9Bo6hMl15NLwVsEgS5Jif/KE6z8/XNDmFCqWl1:DO5MvL7EgSvAV5XNDmFCB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7779d5782d5c99ed41a52814ddd30eac_JaffaCakes118
Files
-
7779d5782d5c99ed41a52814ddd30eac_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rawdat Size: 109KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE