Static task
static1
Behavioral task
behavioral1
Sample
b1fd5939a9aba599c0c99f5ef45dff01_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b1fd5939a9aba599c0c99f5ef45dff01_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b1fd5939a9aba599c0c99f5ef45dff01_JaffaCakes118
-
Size
59KB
-
MD5
b1fd5939a9aba599c0c99f5ef45dff01
-
SHA1
2498239ed83a809e4634da328cdc05a07d5fb389
-
SHA256
09a0b3e137eff31cb45a4332f0c0754734500c6f4b1d3f596e7a58177f5b154c
-
SHA512
0b96ea67b9ff72d200108cac9a6c2b596f80a7baf8b27659f295059adf65dc7ce46161507f87e56bc094abc300cb6403fd4eb230285d356dfb866a32cee6a098
-
SSDEEP
768:Y+hDohrYHE3tlxnDLwS4a30n7kPgLMQty/gzxMfAAabok8Z3sVkh:YyDEMHOtDkLdgPgLMQNSAAaMZCk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1fd5939a9aba599c0c99f5ef45dff01_JaffaCakes118
Files
-
b1fd5939a9aba599c0c99f5ef45dff01_JaffaCakes118.exe windows:32034 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
ryqqjbyj Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
zbyjayay Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
arabriaz Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zzaribyq Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ