Static task
static1
Behavioral task
behavioral1
Sample
b67ab14f7608f837992c7d579da28d11_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b67ab14f7608f837992c7d579da28d11_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b67ab14f7608f837992c7d579da28d11_JaffaCakes118
-
Size
10KB
-
MD5
b67ab14f7608f837992c7d579da28d11
-
SHA1
bb3f2159d6b43b57b639e65944b581634152fa49
-
SHA256
1076ca0d05f37ba5f221303200d7f4cf8ba490420f7bbfbd0357c52a07bcbb97
-
SHA512
22f3c2304f899b5e1579bcdf65d37c807871b1cd77b978cd6ee7ca90584659352532b1ae06c84d22790749e4148a261d83d5df3b48fd804fa213cf842cf34378
-
SSDEEP
192:0JGc1Zl2+VAfNxl1THs6xgzgVGjPlR30L76OnQAlKhFo22Xs6Z0:0JGcMJxDTHfRmRu3c6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b67ab14f7608f837992c7d579da28d11_JaffaCakes118
Files
-
b67ab14f7608f837992c7d579da28d11_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sections
.text Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE