Static task
static1
Behavioral task
behavioral1
Sample
a53f34aa4eea6dc0d646793cc8892e65_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a53f34aa4eea6dc0d646793cc8892e65_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a53f34aa4eea6dc0d646793cc8892e65_JaffaCakes118
-
Size
20KB
-
MD5
a53f34aa4eea6dc0d646793cc8892e65
-
SHA1
0f6f82c9bef20626ccdb0894828c7a4b8ae2ab37
-
SHA256
c562d0651bbaf50681fe15394bbb85693db3b911e2ae5117fb8b7e63cad88555
-
SHA512
e3af58fc5fa2de6f25479101f05d0c2c93e19d5f968732951f9fa05e9c50b3a5e32445f468a6fde8f974dd1ef53b31f97cd77ccaa5574c19d380bf76deb26037
-
SSDEEP
384:G71NunLfWJgtRThamegmcBhIXhqU2g4tZdTHQlXGGTawYtD3JM:EunLuJ69IcUXEZdSXa3JM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a53f34aa4eea6dc0d646793cc8892e65_JaffaCakes118
Files
-
a53f34aa4eea6dc0d646793cc8892e65_JaffaCakes118.exe windows:4 windows x86 arch:x86
1743a5b9816a58c2129527a62802cc12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
Sections
.text Size: 15KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ