Static task
static1
Behavioral task
behavioral1
Sample
b9827d467ea1ac22a63892b14d120ce5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b9827d467ea1ac22a63892b14d120ce5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b9827d467ea1ac22a63892b14d120ce5_JaffaCakes118
-
Size
18KB
-
MD5
b9827d467ea1ac22a63892b14d120ce5
-
SHA1
ca04eaafba6b3fefd38a25ea30f51aa7d1ba0d46
-
SHA256
b1e29d8de2cfe953b195fa5473b9ab5a3626d20fd29b0de2b4b06ac1e0e63805
-
SHA512
ce3a1c14ca24871d7985e8324a0b1ce17c3a5be58617f6aa94ee00cce68b5a1ce36e5dc32afdb1c8f2ed2941161b7e0b34c3120bdeb8d1ab4a651560a0de51c2
-
SSDEEP
384:O6ZTNGhl5Qir13pdt06f1NN9h43rmaqXZZ9SKHDRvLYUL/HUKt/82/D7LXMANa:tZchjQiZ5tf1NN9h+rmaqXZZ9Scdv0Ua
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9827d467ea1ac22a63892b14d120ce5_JaffaCakes118
Files
-
b9827d467ea1ac22a63892b14d120ce5_JaffaCakes118.exe windows:4 windows x86 arch:x86
23fdf1f023e3ea31b4f23089bb8dc59c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualAlloc
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 118B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ