Static task
static1
Behavioral task
behavioral1
Sample
bef53bab34de83433f80a42663eaf4eb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bef53bab34de83433f80a42663eaf4eb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bef53bab34de83433f80a42663eaf4eb_JaffaCakes118
-
Size
57KB
-
MD5
bef53bab34de83433f80a42663eaf4eb
-
SHA1
16a58303733b45e880940d64fbeafaff10e1cc7f
-
SHA256
445ed0910592cc8e6026f842da6e3bf398266f30ac0dce0af2062eb8d508afbc
-
SHA512
d999f3e9e983f5b0e2417367e6f711737e7df82c2c01c7a6ae6ab717b33e4a77b60d95c4c0333a13a52bc28f3ac370cbc96b27dfdd624ae9f49e23d2b2358a10
-
SSDEEP
768:7zcHOihrInEuW836+XMEFMvNcsY+dwXh2e2oEYGCAqh19NDm3A3Hg9atQ0NCfmcw:MgEuWlEyVc/3h2PDAu3h9a1NCVDdVGVl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bef53bab34de83433f80a42663eaf4eb_JaffaCakes118
Files
-
bef53bab34de83433f80a42663eaf4eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
2a6cf69ec1f2374fb62f74cdeda1d3a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
MoveFileA
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DATa Size: 24KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE