Static task
static1
Behavioral task
behavioral1
Sample
c201b1e3cd7bf8105e4b3f78c4c657fd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c201b1e3cd7bf8105e4b3f78c4c657fd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c201b1e3cd7bf8105e4b3f78c4c657fd_JaffaCakes118
-
Size
51KB
-
MD5
c201b1e3cd7bf8105e4b3f78c4c657fd
-
SHA1
f306259a6d84c17813d2005be00cbd7f7f9912aa
-
SHA256
ca729979d4eda3875d3e9d0a4030f43ac2f1a95ae8610260ac252326f34fd5b3
-
SHA512
c0143d6cc639380ce27af3ba6c0c9bd06ad07ed8a8ad03084826a2f27b5182571e5df25d09fff8836d7db7d36bcf737f562ac9d67a8ba4f02c6bfe744acf812c
-
SSDEEP
768:XGb6+DK4+xIZBJm1wKB+A6eSI0CO9pcD/5lA7WM2LN/0IGYQum1p2YL2Wh4iF8v0:R+OC2uJI0CYc/A7d+O/1p2u2Wh4eWiz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c201b1e3cd7bf8105e4b3f78c4c657fd_JaffaCakes118
Files
-
c201b1e3cd7bf8105e4b3f78c4c657fd_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_TEXT2 Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE