Static task
static1
Behavioral task
behavioral1
Sample
8320e232dfb9bb338b01c59eb14dab66_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8320e232dfb9bb338b01c59eb14dab66_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
8320e232dfb9bb338b01c59eb14dab66_JaffaCakes118
-
Size
52KB
-
MD5
8320e232dfb9bb338b01c59eb14dab66
-
SHA1
6ce657ec284af921a3ac47de7ae541e89af668de
-
SHA256
ba71daef501d087da0e1e06e95c78637b17905da58be1c5d562940b9f0dba58a
-
SHA512
a325f8df70ae0c270500b942f5edfd70c6d29149024b290e97973dfb6df50ccbeff6e88fa6309037966f32d9047065915e55faa907cde3a81c8ebcba5dce1765
-
SSDEEP
768:lIVlthGu65Wk/MXlgc/E7S1eq7Rgm7Q7I9ppqAAO9Ud3wknHq4OXxAiTDXr:l6ltRfrM9qO/CmAA3NnonDX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8320e232dfb9bb338b01c59eb14dab66_JaffaCakes118
Files
-
8320e232dfb9bb338b01c59eb14dab66_JaffaCakes118.exe windows:4 windows x86 arch:x86
5f7c1c5f782810323dacf24bcb0e83db
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
ExitProcess
Sections
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 110B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 245B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE