Static task
static1
Behavioral task
behavioral1
Sample
a66b16692ed2713dc15acc992276c7d7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a66b16692ed2713dc15acc992276c7d7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a66b16692ed2713dc15acc992276c7d7_JaffaCakes118
-
Size
291KB
-
MD5
a66b16692ed2713dc15acc992276c7d7
-
SHA1
143a45ff240d23e842469e708c251562df1c6ffb
-
SHA256
ca4d43f550dc60ce906d61c0fb699b752e08f25d7b7959decc2d86b08d9e43e2
-
SHA512
01a440f536f061657a1fc835534b2a60a66766c6df16ab1a44b0fe35672b38a030c635cd054885d5879c3fe12b5ea02b7b2d7a002e35f1dcdadabb3469d76063
-
SSDEEP
6144:OwlolOTFfRY+C1J9hii6CCcLFWwtsaGiPYbKd7WaHCL+ZPQ:byOTFfR4hiVCCc5rlGEYurHCidQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a66b16692ed2713dc15acc992276c7d7_JaffaCakes118
Files
-
a66b16692ed2713dc15acc992276c7d7_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
.text Size: 222KB - Virtual size: 820KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ccg Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE