Static task
static1
Behavioral task
behavioral1
Sample
a8f5b7fb8efb9416a318b36137d8caa2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a8f5b7fb8efb9416a318b36137d8caa2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a8f5b7fb8efb9416a318b36137d8caa2_JaffaCakes118
-
Size
16KB
-
MD5
a8f5b7fb8efb9416a318b36137d8caa2
-
SHA1
255bfc27b13d002410484e8b7818b1291ed85db6
-
SHA256
c8eac0dd378eadc10c7fd99cd93d2d0dea0a25ad19925fb8310d1700bf18a153
-
SHA512
35c1bbc79e2131777e39bbe14936bda0b35b83b60b6b12430fb9522acfe1754ae6af04b4eb8251877b9c559177a5ca772bcc1032bb844d513c4ef5830f7e3c58
-
SSDEEP
192:S8oO/dR8QiuJCegxRLENkqYpFjCqglDGYKBLMnVdIuadJAwWhRu719APTuIrIXlP:SMoQnJDmRIbYPjCj5tnVEAwCRu6TpxG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8f5b7fb8efb9416a318b36137d8caa2_JaffaCakes118
Files
-
a8f5b7fb8efb9416a318b36137d8caa2_JaffaCakes118.exe windows:4 windows x86 arch:x86
17b879e9fa1718a56a64070ca651cac4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
shell32
ShellExecuteA
user32
GetSysColor
Sections
pec1 Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pec2 Size: 13KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ