Static task
static1
Behavioral task
behavioral1
Sample
a61115255270c03d10c38c8f3581ef64_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a61115255270c03d10c38c8f3581ef64_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a61115255270c03d10c38c8f3581ef64_JaffaCakes118
-
Size
41KB
-
MD5
a61115255270c03d10c38c8f3581ef64
-
SHA1
49e08d25987aa6c10956e3803632fba86a7cd15a
-
SHA256
5b1c5487ac2aa7fa54854b9b616ae050969574f2534c27516aba37a123bd4a05
-
SHA512
1de0ad7dddc20fcdfffd9ab656496e6aa84b89ca7065f784d92e35551a6554d5ce535d63f9b9a7e004a7f1d27ebcc33117691c66572f8f27cbd08d382c8f5cbf
-
SSDEEP
768:Yln3rf6aW7e/YgmbL1hx52GBsBBDZu6DZu:Y56NSAgKL1h2GqAz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a61115255270c03d10c38c8f3581ef64_JaffaCakes118
Files
-
a61115255270c03d10c38c8f3581ef64_JaffaCakes118.exe windows:4 windows x86 arch:x86
efa5c34925526d8b71b44629d2f432dc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
lstrlenA
GetProcAddress
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE