Static task
static1
Behavioral task
behavioral1
Sample
c24c0361712d8fca356e287b64f3f6fe_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c24c0361712d8fca356e287b64f3f6fe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c24c0361712d8fca356e287b64f3f6fe_JaffaCakes118
-
Size
36KB
-
MD5
c24c0361712d8fca356e287b64f3f6fe
-
SHA1
0dfb443d3af7782d3abe9a1d8f4f8e0cd20809cd
-
SHA256
7f607b72bcdb017258f177efbe99ed384d2ff67e06b576dd15ae835a66141f64
-
SHA512
55637e29760f92db6c5559af9aa2d434b89090392ff505a9103085a70c5292a72d6733e25150eabdf67e3c176c468f213c91ed87babfe7446bffa054d88e3fb1
-
SSDEEP
768:ye3k3DoOOfMgTlXCv8oCbCyU7Nwt1MG/g7DnBoJtUcQwE:/3oDbOEgTlX/oLyU7NQS7D6J2iE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c24c0361712d8fca356e287b64f3f6fe_JaffaCakes118
Files
-
c24c0361712d8fca356e287b64f3f6fe_JaffaCakes118.exe windows:4 windows x86 arch:x86
9ec6a573d2e74bf19d7546b3a6b639cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitThread
Sections
.����J Size: - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�[�*��C Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
��ϳ�p�l Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ