Static task
static1
Behavioral task
behavioral1
Sample
be389f53fadc1b69e1320272d71c005d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
be389f53fadc1b69e1320272d71c005d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
be389f53fadc1b69e1320272d71c005d_JaffaCakes118
-
Size
60KB
-
MD5
be389f53fadc1b69e1320272d71c005d
-
SHA1
2f4e63399244dea8f71013608849d0d976fe200d
-
SHA256
c566c5410ac0950fcfb42f0d99f5e78b0664233ded359f85c28901bc44fd187c
-
SHA512
ac16f1001e08d4805db0ea90a63f15a05681dd76aa9ca21c9d452e6180b953a4b9f80fe24b941fc9edd10f2235dafbbb07e3b0d8c8291366d56e9e771bf38302
-
SSDEEP
768:NTH7R6G8MCtjmlnzZuzozNkyVF2QLP+IgWp8J9xMSE6YbgTpOMd785l6X9u:NvGgDr32Qj+IgM8J5E9M1kl6Nu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be389f53fadc1b69e1320272d71c005d_JaffaCakes118
Files
-
be389f53fadc1b69e1320272d71c005d_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.avx���� Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE