Static task
static1
Behavioral task
behavioral1
Sample
a8c8f649a7f618e06f5a68560e680341_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a8c8f649a7f618e06f5a68560e680341_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a8c8f649a7f618e06f5a68560e680341_JaffaCakes118
-
Size
103KB
-
MD5
a8c8f649a7f618e06f5a68560e680341
-
SHA1
c01a249ab45bee8e3ef229f2d0fffe5905b75590
-
SHA256
b98807787392095a76ae17f1d08470758d9b95a26efe140045a4f685f46f0cab
-
SHA512
3656c121824411f6f251e60b3fbc85c7a44b8a9ab188bc4a423fdbbb73b85016c75a84aae57d5584bee234de8ea3b5628fac1ebd27628cfc6b21830e5f3bad16
-
SSDEEP
3072:S2YhWo7rplXuLSWGyQhlaNa983lYrgOqzj7IrC2eFOL:PcZunGyQTaNa983lBNx1Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8c8f649a7f618e06f5a68560e680341_JaffaCakes118
Files
-
a8c8f649a7f618e06f5a68560e680341_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rawdat Size: 92KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE