Static task
static1
Behavioral task
behavioral1
Sample
a93fdabb7719c0895219e11990b2b9f1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a93fdabb7719c0895219e11990b2b9f1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a93fdabb7719c0895219e11990b2b9f1_JaffaCakes118
-
Size
120KB
-
MD5
a93fdabb7719c0895219e11990b2b9f1
-
SHA1
84ff86b6440efb143713124ba2fcf702e062bdbe
-
SHA256
a91bb92bc77c56837eeaa87d65bd52c5ae6f9762af2338256233583a1209be9a
-
SHA512
36c963b0d83b9f5853f6a1f65a144209f34d7479e709b18c2bd534c25c4144f5472040f973736eb31ab84c34906991f3d965f4adbf9ee19432f3a5625dce1e30
-
SSDEEP
3072:SKa4Cn/QXevkzHBd7xo12wp/OPWckQA7M8ppppx:SKO4uvkzHBd7xZdPkn7Hppppx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a93fdabb7719c0895219e11990b2b9f1_JaffaCakes118
Files
-
a93fdabb7719c0895219e11990b2b9f1_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.data Size: - Virtual size: 564KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.decode Size: 115KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE