Static task
static1
Behavioral task
behavioral1
Sample
b13ee156322ee19d5739cd874d54be8b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b13ee156322ee19d5739cd874d54be8b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b13ee156322ee19d5739cd874d54be8b_JaffaCakes118
-
Size
25KB
-
MD5
b13ee156322ee19d5739cd874d54be8b
-
SHA1
c47c388151d19aa4f32cf201946f6d95cd6313d3
-
SHA256
2263e6121164b3ea44905153d041c6924b42ee7a6b511fc1cce7926960150b82
-
SHA512
58f406bdf7101997d17fdbc0d31b56e4a8674576816d59374ac51141d26ad400fffdbd0a4a84dea943a697a4a902e2dedc36ab85c2d421a3d3e3960ab927453f
-
SSDEEP
768:tTb2BeXqQ/m2RoUNZ7Tedy4b+xLpvFdFsrFJ0sF:sBiqQXoUNZHKgL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b13ee156322ee19d5739cd874d54be8b_JaffaCakes118
Files
-
b13ee156322ee19d5739cd874d54be8b_JaffaCakes118.exe windows:4 windows x86 arch:x86
d76f4237a8ae158292f09835997a1d9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
Sections
3��V�#� Size: - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
��A�� Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ƙ��?{�� Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ