Static task
static1
Behavioral task
behavioral1
Sample
83ba4704d1033123f50b83c36bc31691_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
83ba4704d1033123f50b83c36bc31691_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
83ba4704d1033123f50b83c36bc31691_JaffaCakes118
-
Size
16KB
-
MD5
83ba4704d1033123f50b83c36bc31691
-
SHA1
a3e89e5c79a087ee91e36d49c0a2f470949fecf6
-
SHA256
c6ecafbc3f695ac763a5642e5e10255dffb071347cc74cf3ce5c89ab38597511
-
SHA512
f9dc82ca01115c109db3da3289dce72cebed92ca5be61c4c928c6f32bf34c527f4eb1448dd9b68e16502f30c22c152537d4673756c78be74a68668bbbc817fa2
-
SSDEEP
192:b/gguSUGKWFJW1JPFj4ptHG8lXyBT6RLjY6btI/Mlx6WTLAQkjyFoe4CDx:b/jcb0JW1Jypl1ioRnYO0Mj6WTieaevt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83ba4704d1033123f50b83c36bc31691_JaffaCakes118
Files
-
83ba4704d1033123f50b83c36bc31691_JaffaCakes118.exe windows:4 windows x86 arch:x86
198217f39a1b31368681bed82723db34
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
ExitProcess
msvcrt
_iob
Sections
Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE