Static task
static1
Behavioral task
behavioral1
Sample
9665b485bb8acf1310899604540f5121_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9665b485bb8acf1310899604540f5121_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9665b485bb8acf1310899604540f5121_JaffaCakes118
-
Size
59KB
-
MD5
9665b485bb8acf1310899604540f5121
-
SHA1
6a7c1c199af79d8b9ad39b2b03a096849f93d02e
-
SHA256
122f2e3cb70a075907633f2e4a2a30e537f47c42775abbbc9db35a906c54e21c
-
SHA512
2cb8c4591bf8986d479d8edcad3fd9a52eaf4e18b32253e7770e08767ecd135b54007c64ba04c5186d14139e3310b54a0eea450ae87cf26eaa5436bf3147e4e2
-
SSDEEP
768:R3Jqz+PVl6ZPtL5KKLyGQXDgJSbG6qYUOxtimw8/fLFXB4lMGB3yLUK2k:66dl6ZPDLDQXDgJksYUOnij8u7Cn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9665b485bb8acf1310899604540f5121_JaffaCakes118
Files
-
9665b485bb8acf1310899604540f5121_JaffaCakes118.exe windows:21 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
qbjrjirr Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
qqiqaryq Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qjbyjzby Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jayayara Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ