Static task
static1
Behavioral task
behavioral1
Sample
c234c88d21a1cde9d147e980c4ed015a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c234c88d21a1cde9d147e980c4ed015a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c234c88d21a1cde9d147e980c4ed015a_JaffaCakes118
-
Size
122KB
-
MD5
c234c88d21a1cde9d147e980c4ed015a
-
SHA1
115fab958397f018752947de5d228a0766e99349
-
SHA256
12229f4c15e8ffa461a8c038561f1da5eb8861826e6c751f657010a768b231e3
-
SHA512
a44b4f7459656affdff68c305a0b24bc0890f52425423474a63e5f61eb4f893f232fd3b6e15f1437caa7360045b02509c0762ca9d319a596fd64dc765233b001
-
SSDEEP
3072:eZZNd7TtAL4vUPBoB5f8RV6uCv/KOMvnpaCgQ:eZZL7YBMzgwy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c234c88d21a1cde9d147e980c4ed015a_JaffaCakes118
Files
-
c234c88d21a1cde9d147e980c4ed015a_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rawdat Size: 109KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE