Static task
static1
Behavioral task
behavioral1
Sample
8349f8c213a652aa5f0e1eaed748cd0b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8349f8c213a652aa5f0e1eaed748cd0b_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
8349f8c213a652aa5f0e1eaed748cd0b_JaffaCakes118
-
Size
26KB
-
MD5
8349f8c213a652aa5f0e1eaed748cd0b
-
SHA1
e291d364797434d83b79fe449b720cc8913873b3
-
SHA256
28737432fe94aa4db5cabf0f86659eb7177635473200a3b55fcebb14015f917a
-
SHA512
209479e8007f87009a6f1aea91c54a488e53b5cc3e7524f3337d3a74404ce379f07d66f5cc14957701676dd4f5ab73ceadcec8e7ea84bc99af91373bae9198c6
-
SSDEEP
768:Y56zZ8CFpD951ggCU1Fm0rs/RrWrEgVZNjGEBAEr6zr+:Y5WlF/8gCU1YNxyEYOEuE2+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8349f8c213a652aa5f0e1eaed748cd0b_JaffaCakes118
Files
-
8349f8c213a652aa5f0e1eaed748cd0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
5e58d0c080fff3efd1b29d3331696cd7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
Sections
D�N_n�� Size: 15KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�4�q�* Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ