Static task
static1
Behavioral task
behavioral1
Sample
789a47aedaa43957e04d9fb218b98350_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
789a47aedaa43957e04d9fb218b98350_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
789a47aedaa43957e04d9fb218b98350_JaffaCakes118
-
Size
33KB
-
MD5
789a47aedaa43957e04d9fb218b98350
-
SHA1
e95261b87210ff8bd2111ce1ef211d64bb43980c
-
SHA256
c8a075c7dc9203279df507ca85e1518499e57e4caaeb4a536ae43a8c1949a7c8
-
SHA512
812eaa3775324536e8ba67ee068f3f23dbb7d3c379599075cecc068f4c96846966b4982ba90e2440d6f666733a7a343c24387c36bd85d26644030b348bac620c
-
SSDEEP
768:tBhSaSiTkTgNLc5Ws7a/vffTQ5evqgD/35h4:tCFCcWsO/U5eDDPc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 789a47aedaa43957e04d9fb218b98350_JaffaCakes118
Files
-
789a47aedaa43957e04d9fb218b98350_JaffaCakes118.exe windows:4 windows x86 arch:x86
5e58d0c080fff3efd1b29d3331696cd7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
Sections
��xf��Nj Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
������9E Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
��D��E� Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ