Static task
static1
Behavioral task
behavioral1
Sample
8cf7cbaea95aef8c7576f9518ef8fdff_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8cf7cbaea95aef8c7576f9518ef8fdff_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8cf7cbaea95aef8c7576f9518ef8fdff_JaffaCakes118
-
Size
23KB
-
MD5
8cf7cbaea95aef8c7576f9518ef8fdff
-
SHA1
4a818956fbaa0adac8c3fa5287135b7f81efa8c1
-
SHA256
391e3c5a1a9acafcafe11c04d63be23745bebfdc7a20f9b6207e2bc7223c8f23
-
SHA512
00761706f3e841e21d79fcfeba2bbddde0f2235081e87fcfc6ac6bad0961e0cd9f8d0d824302489f83122ce36ab1e3900a3873fc884cd897a4b113456a6db0dd
-
SSDEEP
384:+WhRaQj1dmnRhWIDd9SW882iH2Uc3bbLTz9gM9l1NRxjfpK:dNjKnRhWIJYWGUc3D39g49jf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cf7cbaea95aef8c7576f9518ef8fdff_JaffaCakes118
Files
-
8cf7cbaea95aef8c7576f9518ef8fdff_JaffaCakes118.exe windows:4 windows x86 arch:x86
35347c755519b7d0311887e16c6cc7d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHAddToRecentDocs
StrRChrIA
StrStrIA
kernel32
CreatePipe
TerminateProcess
VirtualProtect
Sections
.text Size: 13KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ