Static task
static1
Behavioral task
behavioral1
Sample
b11c30cc27894919138c95e0e739d34c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b11c30cc27894919138c95e0e739d34c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b11c30cc27894919138c95e0e739d34c_JaffaCakes118
-
Size
48KB
-
MD5
b11c30cc27894919138c95e0e739d34c
-
SHA1
d607b4300749c6527a47556cfcb25adb85fe6c89
-
SHA256
93250c3cf3b548134bb52e3efa68230944fdcb22b7c53142d7f864c8eb454779
-
SHA512
b2ed0baed44a91499886bb0488c850264638cc273d5445b50cd85ffa796473fe09ba7fa5e5896bbd28952ef578d0418e23ff244348ec7810e92bc7326ad4e2b9
-
SSDEEP
768:TiZe74WY/UcnG2NHfp/mH9Y2z+I8hLpoW66eQOaAg:TPli7N/pNI+OJYOaAg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b11c30cc27894919138c95e0e739d34c_JaffaCakes118
Files
-
b11c30cc27894919138c95e0e739d34c_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_TEXT2 Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE