Static task
static1
Behavioral task
behavioral1
Sample
be6f49f1d6c48ec591440b1064b938dd_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
be6f49f1d6c48ec591440b1064b938dd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
be6f49f1d6c48ec591440b1064b938dd_JaffaCakes118
-
Size
82KB
-
MD5
be6f49f1d6c48ec591440b1064b938dd
-
SHA1
d6e18ce09bb0e6a133132cad77b4ca4eeb61e49b
-
SHA256
3d08b89b5e85e6a8501de639ac3f0314228d725ab620cf6559cb2a9e9ce98426
-
SHA512
ba887969b0f43e064f8324643fbfdfe2b9879785bfaaa65be7d36121478c245c8d0a1b8e65806c3dba7ab802ac32ba1adb5bfac8421316e9a16b2e7da5173f7f
-
SSDEEP
1536:edllSyW5qwGpjLL/smIQChSFftMctC6MJXjV3OjcvpYwd2t8zx0My:ullmOpHLQQFlt5rMJXj1NpYVWOn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be6f49f1d6c48ec591440b1064b938dd_JaffaCakes118
Files
-
be6f49f1d6c48ec591440b1064b938dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
1743a5b9816a58c2129527a62802cc12
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
Sections
�M ;y�; Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
g[���r�� Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ