Static task
static1
Behavioral task
behavioral1
Sample
c799cae713ad9bc0d3d7b0d255f3d980_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c799cae713ad9bc0d3d7b0d255f3d980_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c799cae713ad9bc0d3d7b0d255f3d980_JaffaCakes118
-
Size
226KB
-
MD5
c799cae713ad9bc0d3d7b0d255f3d980
-
SHA1
7ace615e6a41376f29cadad173756194374d736a
-
SHA256
26936c58544707cde12ab8c5483c57749d16df87275fc2b9e2f3aa48a46d5b07
-
SHA512
d9e262b18541cb8e17fed88080b2302c81adf654052fe3b0dc04d2708869acdd462f79230af61d4ac7235e00493532e3cf647c6edb6fb732c603a8e69d42f089
-
SSDEEP
6144:DWjGQhZJNNE6cy98vkBmBX1qLAV5+2FLCK2+rzpTX:DWjBbdEzW8vk4BX1KAV5+2s4rzF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c799cae713ad9bc0d3d7b0d255f3d980_JaffaCakes118
Files
-
c799cae713ad9bc0d3d7b0d255f3d980_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
ExitProcess
Sections
.text Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ