Static task
static1
Behavioral task
behavioral1
Sample
825d32271cd436b56ce32f929d15b69c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
825d32271cd436b56ce32f929d15b69c_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
825d32271cd436b56ce32f929d15b69c_JaffaCakes118
-
Size
7KB
-
MD5
825d32271cd436b56ce32f929d15b69c
-
SHA1
b732f1f13af299d53ccba31505480dfc9d38bb3a
-
SHA256
2ecc5b04f8d2a727eccbcdfcff5a5f267cc1b493760c09e8a6a0b10e53d6949c
-
SHA512
7a74a7336b5af4b43f58e4eef04bced6c4100f53cc225e246cc08207f76718d118460e1ac8d78d97eeefd8336875bf6ffc6743fbf150e0394aebf3f94339bef8
-
SSDEEP
96:obcpy/mSPVqiCVvttZPvMa/BcgZCGElAhhWQJIoaOMp6HuEcXlJmj5dIjZ:obcoDP8RvzZPPZf5EoSoaO3HcXliG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 825d32271cd436b56ce32f929d15b69c_JaffaCakes118
Files
-
825d32271cd436b56ce32f929d15b69c_JaffaCakes118.exe windows:4 windows x86 arch:x86
2eda502d39734c2a70c5e0d029966397
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
ExitProcess
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE