Static task
static1
Behavioral task
behavioral1
Sample
856be2347ab1bb9a4994d21f7f433dc7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
856be2347ab1bb9a4994d21f7f433dc7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
856be2347ab1bb9a4994d21f7f433dc7_JaffaCakes118
-
Size
76KB
-
MD5
856be2347ab1bb9a4994d21f7f433dc7
-
SHA1
ac146afedb9baee8f0e563baa3dfec56045cd8e9
-
SHA256
26a4096644fa17e164a72b09921a2d99a83d12363bd4feefd7fbcbb05e358320
-
SHA512
4f6e39f4ce2fb5bb7f5f1eafc7892621eb92c1f890cea3d821fd0c4cfbc37c6f613294d28242a1c69d098e4e5fc48f82e6e6119a54527efc7c570b8b2c0b7859
-
SSDEEP
1536:8ZFRCAuEf6PL3GWjHp2bgdowyuEHEDK8Z3q/J2xEu7D7TKjzu:WHzWjHpJH+HwZ3q/J2xEWI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 856be2347ab1bb9a4994d21f7f433dc7_JaffaCakes118
Files
-
856be2347ab1bb9a4994d21f7f433dc7_JaffaCakes118.exe windows:4 windows x86 arch:x86
b5c0892fa36495b498d09f7c10228f02
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
Sections
l�� �r� Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�V5�ID�� Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ