Static task
static1
Behavioral task
behavioral1
Sample
b09719f0899271c8e1da841d43ee3307_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b09719f0899271c8e1da841d43ee3307_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b09719f0899271c8e1da841d43ee3307_JaffaCakes118
-
Size
23KB
-
MD5
b09719f0899271c8e1da841d43ee3307
-
SHA1
8145f3f25d8353d9132acf2c4de9e84d1dca1fd1
-
SHA256
4222eb55551974d56f36a561316e693fa8db8ec79f521aff61b6a5ce99215e1f
-
SHA512
95030d9ad85df58af72428cac4bf5118161733caff25224a4390a38421b1e88054582088319156e01ec94073774828ce1a2bbc27dca07506e65dc7163c35ff09
-
SSDEEP
384:HmtZ+R6/gf79fPHU2Cj15p1YT/p2AJF222qaAwcoX1O4AQJfOUTOz3X7XgXIXxXY:+PYDhPjCXpuT/wAJFvdVwc8fAgOXznrW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b09719f0899271c8e1da841d43ee3307_JaffaCakes118
Files
-
b09719f0899271c8e1da841d43ee3307_JaffaCakes118.exe windows:4 windows x86 arch:x86
b7aa5ad21fef535197ce43d189c00604
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteAtom
Sections
�j�(��) Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�������` Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�2���5� Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ