Static task
static1
Behavioral task
behavioral1
Sample
c7bf7e34159d659ab7512a31fadc48a9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c7bf7e34159d659ab7512a31fadc48a9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c7bf7e34159d659ab7512a31fadc48a9_JaffaCakes118
-
Size
26KB
-
MD5
c7bf7e34159d659ab7512a31fadc48a9
-
SHA1
bb8158b009355d13751e7e4aec7c1d47111dd94d
-
SHA256
e26d5139db347d2dd1c6160fb45add6183667f4150e642b71c61b7e89bbcdc6d
-
SHA512
63a2d3bbcea95fae171d0c6b36e2bb4079551088cb2b157d189f74fb4f076c249765dabfd3ee3468a87f2c8b96022b434ecf7c7ad6a00192589710e0f9460c5d
-
SSDEEP
384:cZoX71Svg6d9YkfayfReSfLRmhPy0AZGjYW+phauU4kCLFMbF:wAxSY1kiAeSfLRWCZGsJaWkCLFM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7bf7e34159d659ab7512a31fadc48a9_JaffaCakes118
Files
-
c7bf7e34159d659ab7512a31fadc48a9_JaffaCakes118.exe windows:1 windows x86 arch:x86
05c7df6d575c13faf78878f9450f3b20
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
ExitProcess
Sections
.idata Size: 512B - Virtual size: 146B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE