Static task
static1
Behavioral task
behavioral1
Sample
c223dbee60819ea21eacf4c3543bd8df_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c223dbee60819ea21eacf4c3543bd8df_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c223dbee60819ea21eacf4c3543bd8df_JaffaCakes118
-
Size
52KB
-
MD5
c223dbee60819ea21eacf4c3543bd8df
-
SHA1
04cc2a313763f7fb4ccbfa41219987941c5f7520
-
SHA256
76617f97ab6c3b30b1c9b277aa1fdcc14d87b29cfc656dade4c44e400505f4fb
-
SHA512
6d3d950bbad5bed0039e0c733d0870a8fa098b2267def7656cd818e9427d9c63e4fe81430d8116f32353c0103c4871c8d9f7e370c4101b305778ba8e30fcc1db
-
SSDEEP
768:1zv54c6+4ZmBfcXS653/KCYcaL3B7Ix2uAfLiox613taKYYd4sc8nZdj2:V54Q4OX653/KCYHL3RiAfLi7aKYYd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c223dbee60819ea21eacf4c3543bd8df_JaffaCakes118
Files
-
c223dbee60819ea21eacf4c3543bd8df_JaffaCakes118.exe windows:4 windows x86 arch:x86
b7aa5ad21fef535197ce43d189c00604
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteAtom
Sections
.text Size: - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ