Static task
static1
Behavioral task
behavioral1
Sample
a320975d98646a7b8ded2c67f254d8a0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a320975d98646a7b8ded2c67f254d8a0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a320975d98646a7b8ded2c67f254d8a0_JaffaCakes118
-
Size
59KB
-
MD5
a320975d98646a7b8ded2c67f254d8a0
-
SHA1
c9fb283b90ee589018b5dc5d74e9bf03fdfb1794
-
SHA256
ea8edaaecc0e9a7532957f08b7abd382b11ef78fbae2ddab0aa55d57b52949b2
-
SHA512
6e025b044d76720d058375f411cde07264e067eb3b7efe18c62e67c3cbc956a59e1ad2af305828c41b6cb8841aacc02d89eb634f100b657228905d1b76d4157d
-
SSDEEP
768:c5EJrZRH4hpJ4OPLXwsF3pS1xD+yIudgBTZjFGNcfo/lgruNnc:HPRYhpJ4uwUZSiyIPj1oiruNc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a320975d98646a7b8ded2c67f254d8a0_JaffaCakes118
Files
-
a320975d98646a7b8ded2c67f254d8a0_JaffaCakes118.exe windows:39334 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
briazzza Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ribyqabi Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jrazyiya Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ibyqyajq Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ