Static task
static1
Behavioral task
behavioral1
Sample
8d468953877608cca1820c465839dae7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8d468953877608cca1820c465839dae7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8d468953877608cca1820c465839dae7_JaffaCakes118
-
Size
16KB
-
MD5
8d468953877608cca1820c465839dae7
-
SHA1
b019f55e150264402a849a690ce3a07400e4498d
-
SHA256
583dd93b8361fe76c22b9282baeb0c2083e1be55e39bd1e7bb26c64e3923f517
-
SHA512
5b1d593316ea9d979401aa8d62f60baa3997290d70d56207548361956233bdaee0e5c942797167fae9ef501fabbda47852158df0fa7c7e83d1465c2ba8a0ca81
-
SSDEEP
192:duRJgt5KZjCnoB29RZ5Adx6o5e8jJred2Xe855deIZJOqdpk+/7p/aqz:JKZjREiVJxTew5NJnj7sqz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d468953877608cca1820c465839dae7_JaffaCakes118
Files
-
8d468953877608cca1820c465839dae7_JaffaCakes118.exe windows:4 windows x86 arch:x86
8456c1a91f2276de9af4257da3f240c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
VirtualAlloc
GetProcAddress
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 138B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ