Static task
static1
Behavioral task
behavioral1
Sample
aa424c70e435bc08f24e89471761653d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aa424c70e435bc08f24e89471761653d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa424c70e435bc08f24e89471761653d_JaffaCakes118
-
Size
6KB
-
MD5
aa424c70e435bc08f24e89471761653d
-
SHA1
0148c735f19c1a15ee608bf84fdab4e956f95e18
-
SHA256
502300025f96ea84107b8b0fd88138e36e7ddf79f49736cbd15e4eff2d0ca2cd
-
SHA512
d7010c26321459bccc404c0d61f7efdd21b934ce29d9bae328d1219332e7b36ed24c6fdffb1e347da6c2da0b899ddc7ea94f0e0ab7a63651c8c008d941e3b5f8
-
SSDEEP
96:V7yxio7CxNvUzcryh/hqaZj0BH18S1mqPuVN/KSsT3c/Vzq:V7yUKqNvUoGhJqacLIqENtsT3c/Jq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa424c70e435bc08f24e89471761653d_JaffaCakes118
Files
-
aa424c70e435bc08f24e89471761653d_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE