Static task
static1
Behavioral task
behavioral1
Sample
b529dae782c91f539ac477af88c98f93_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b529dae782c91f539ac477af88c98f93_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b529dae782c91f539ac477af88c98f93_JaffaCakes118
-
Size
16KB
-
MD5
b529dae782c91f539ac477af88c98f93
-
SHA1
2f648f31dc069681dac7c82bc261ccd6880f0082
-
SHA256
abe0627506718549066df6ba691e8f88c742bc3a06b71c5c2d0fe5cf274efc42
-
SHA512
3d19cbf8527772f31441fe6772ed6e0405d5900278bb1470aede4872509912adf70e0956856d408f2e0f65ce3713a3161eeb3eb0b3c184c6b01cb84120a6f2fa
-
SSDEEP
384:p/jcxzYTpLixv/8WeU0LOMoZ6WTieaevt:pQRYTpL2X8U5RA+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b529dae782c91f539ac477af88c98f93_JaffaCakes118
Files
-
b529dae782c91f539ac477af88c98f93_JaffaCakes118.exe windows:4 windows x86 arch:x86
198217f39a1b31368681bed82723db34
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
ExitProcess
msvcrt
_iob
Sections
Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE