Static task
static1
Behavioral task
behavioral1
Sample
8c92eb4646002f9a57fc601379b18713_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8c92eb4646002f9a57fc601379b18713_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8c92eb4646002f9a57fc601379b18713_JaffaCakes118
-
Size
59KB
-
MD5
8c92eb4646002f9a57fc601379b18713
-
SHA1
a786d5a68a9e2d0c4b85df9f3f1bc28cbe866f23
-
SHA256
f4cbedf2bc4ccc7565ba4fde0cf7ed98e348a6ab69c895519cc61a065d3f7006
-
SHA512
1a08987807d055653ac8619b69d722134856193baf49981721f6144b0dbe0a1b72c6eebd8689f0128dd288cd28df68570e90816d6a6dd1f08b50a10dd6b4beee
-
SSDEEP
768:jLGgITjNgdfcw1zfWbBMMa1BcnY+g9e1t1/6fDBzaTeAxebeQX8Z721i2mvEDNzx:jLGpjmcugB41BZI/6r4TT4beNR21KvJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c92eb4646002f9a57fc601379b18713_JaffaCakes118
Files
-
8c92eb4646002f9a57fc601379b18713_JaffaCakes118.exe windows:26459 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
qyjaaari Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
zarrrzii Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
irrqyrab Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rrararqq Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ