Static task
static1
Behavioral task
behavioral1
Sample
b34e1b1fcd7e18c27102fee0848fb9ad_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b34e1b1fcd7e18c27102fee0848fb9ad_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b34e1b1fcd7e18c27102fee0848fb9ad_JaffaCakes118
-
Size
10KB
-
MD5
b34e1b1fcd7e18c27102fee0848fb9ad
-
SHA1
84fbe641a9b3e0883891013b3730c6e0ecf11c04
-
SHA256
a0f89cf107102c74f26bbfb966ad6735598a22e73655753f1618d13f7bbf8716
-
SHA512
58a90a9d6b3f1e2ecdfa0aa1701df25c1d78c5a9ba867da4ca1fffc740e5fd80574e5ddd29209a631116c2d27d64ec5d7b3435e955eacf27733de3fe0de0f284
-
SSDEEP
192:LJGc1Zl2+VAfNxl1THs6xgzgVGjPlRwL766nQAzXO//:LJGcMJxDTHfRmUh+X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b34e1b1fcd7e18c27102fee0848fb9ad_JaffaCakes118
Files
-
b34e1b1fcd7e18c27102fee0848fb9ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sections
Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 76B - Virtual size: 256B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE