Static task
static1
Behavioral task
behavioral1
Sample
a13b5547f332210e19b222f2410edc25_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a13b5547f332210e19b222f2410edc25_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a13b5547f332210e19b222f2410edc25_JaffaCakes118
-
Size
171KB
-
MD5
a13b5547f332210e19b222f2410edc25
-
SHA1
24961e21878b1e136aff6191d331d6633de073cf
-
SHA256
658a0ceed72c3ee97da94eb0d3b7ce33c3d99a69562610a05d7889298a2f2919
-
SHA512
4d780c29917d08fc8fc8cf3e92cc0ac2dc3318aaa9b7f37a28eca3f8858471d4532b437bb3977d15fb1cc153320a419fd37aacbea3056ad9dfb713fb832903dc
-
SSDEEP
3072:ZUO31f/nYkY+TZDAFVax8OrNKkFoQRxZoYJqAoCpfbSIMvnpBThf:ZB31fYxOdbFNfJRbpOIM/pBTF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a13b5547f332210e19b222f2410edc25_JaffaCakes118
Files
-
a13b5547f332210e19b222f2410edc25_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 170KB - Virtual size: 716KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 108B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE