Static task
static1
Behavioral task
behavioral1
Sample
878520140188b4a45c8a6fdd085b6ec1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
878520140188b4a45c8a6fdd085b6ec1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
878520140188b4a45c8a6fdd085b6ec1_JaffaCakes118
-
Size
20KB
-
MD5
878520140188b4a45c8a6fdd085b6ec1
-
SHA1
de7ffc35aa83f90e679730e95b64f463c8620536
-
SHA256
de763ff7f1791c31b3fab92174ceba3dee4e35a0ba18cc49bbafda72a112ec9b
-
SHA512
0ac7aa05b79132b727e4b7628e5a94f46d1a57041e2345deb4222f9490cd9dbfddd24298d913e2ba18bd17f992f7ed4b19fa37b19b2eb43eb7b1540b1032d2a9
-
SSDEEP
384:/jD4F7AevqPODZ/I9/37XCjmsTpenMKPn0nxfgacFdTE95eaMQPmrYVM3oJ:/jEFUVOO9/rXyHEMg0xfgVFdTgezQOko
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 878520140188b4a45c8a6fdd085b6ec1_JaffaCakes118
Files
-
878520140188b4a45c8a6fdd085b6ec1_JaffaCakes118.exe windows:4 windows x86 arch:x86
647b2d25b4821905b4195ff7a6455b54
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sections
htrghtrg Size: 512B - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�regehgt Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE