Static task
static1
Behavioral task
behavioral1
Sample
a33af6ddbd68fc7afd3e7b9fa5b6de81_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a33af6ddbd68fc7afd3e7b9fa5b6de81_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a33af6ddbd68fc7afd3e7b9fa5b6de81_JaffaCakes118
-
Size
18KB
-
MD5
a33af6ddbd68fc7afd3e7b9fa5b6de81
-
SHA1
2f8fdce8f6c7374aeb80a51690a26a92eb2c3db7
-
SHA256
f8fedd0bc3e974c4323c5ed1f79a1db821d5de3ec3c8b17b88bdb6e588ccf28a
-
SHA512
f6b2e655603b020376ca5dd5954a073b8135fa784ccb482ebb4f59237de185035179363f40cdfedcebd400f741d9128e72a1ce8d514248fdcc1b53eaf30aed26
-
SSDEEP
384:24pnTu81xuXAXX0UCPIpk6EEwb6hLMMjz3HYbaJGkx09re:xUYHCPmkxajYG3Sd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a33af6ddbd68fc7afd3e7b9fa5b6de81_JaffaCakes118
Files
-
a33af6ddbd68fc7afd3e7b9fa5b6de81_JaffaCakes118.exe windows:4 windows x86 arch:x86
6af65a26002cd74cb8bd3e03380eca44
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetProcAddress
GlobalAlloc
GlobalFree
LoadLibraryA
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 178B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ