Static task
static1
Behavioral task
behavioral1
Sample
c24171daee39a30747e8b383736c69fc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c24171daee39a30747e8b383736c69fc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c24171daee39a30747e8b383736c69fc_JaffaCakes118
-
Size
6KB
-
MD5
c24171daee39a30747e8b383736c69fc
-
SHA1
3beb43fc2a5dff310f8c17437a4a20b8bfcc8b10
-
SHA256
9338a2ce0aa9c736315a35d94747a404d5cd4b56921e5e40a24c11eb154d5bc1
-
SHA512
e04cf688f85e35d7a5fa6de9a74d2ed5fad93b14a276a9a0c7a4bf438890d45713b8c7ba040dc51283761c172be32cdfa3fe8f6f0153d689a2d14d23110647f2
-
SSDEEP
192:YAKxo2i9TBJDT7jhAC59Qc6NL5XekpJIv/v:qxoJ7lt4c6NLcv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c24171daee39a30747e8b383736c69fc_JaffaCakes118
Files
-
c24171daee39a30747e8b383736c69fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
4a5c7016f8a55183eaacea531147a4be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
InterlockedExchange
VirtualQuery
LoadLibraryA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE