Static task
static1
Behavioral task
behavioral1
Sample
c18c90e1c02269fab7b36c87d86ddc64_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c18c90e1c02269fab7b36c87d86ddc64_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c18c90e1c02269fab7b36c87d86ddc64_JaffaCakes118
-
Size
79KB
-
MD5
c18c90e1c02269fab7b36c87d86ddc64
-
SHA1
f6e88f624688e5883e939875d3bb0c0c6cde990b
-
SHA256
0d32e698875d129b51672a5fb792da836c6c7ed9c7d1469fec0bcb7d2096ad80
-
SHA512
e6085bd17323e90a4049322c286d601662ccd7f627071929168c04b62b2c7c344bbfd3ff9b291564e77b6550c72f83d0c81952206b1f7234041a5844fb808b95
-
SSDEEP
1536:SqZXJ+TRME9s7nM0bFUB5slk4PjeGBoa+dq5MwxuHCOBy7M1DmU:tlJ+1M97hFU8DjrBoCvI87gm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c18c90e1c02269fab7b36c87d86ddc64_JaffaCakes118
Files
-
c18c90e1c02269fab7b36c87d86ddc64_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 77KB - Virtual size: 824KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE