Static task
static1
Behavioral task
behavioral1
Sample
c9096d363b61023607c92b2cd0f1e7b3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c9096d363b61023607c92b2cd0f1e7b3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c9096d363b61023607c92b2cd0f1e7b3_JaffaCakes118
-
Size
59KB
-
MD5
c9096d363b61023607c92b2cd0f1e7b3
-
SHA1
2addce2aa99a0237e637b4d86f06a22ba6a3eb83
-
SHA256
8b17ccd2efeb5b41f86732ed76bc76c470bd659c13a39d56b259c6a02e9372b7
-
SHA512
64b1c9a2aeab268b44331f7dad3747505946a1228653ee7fb27fe3ce332108a789483c7ca16142a7d955d8b79db247ab9f4daee77da9d99235bff4e1b1a526d6
-
SSDEEP
768:0R6sdiB8ChGV6GL24PgvlsBTpHZcpPReGprshPBvsE+cQ2/MxFsae9j:46sIFhG4GLavGJlypolExFsxh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9096d363b61023607c92b2cd0f1e7b3_JaffaCakes118
Files
-
c9096d363b61023607c92b2cd0f1e7b3_JaffaCakes118.exe windows:582 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
rqjjayzi Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
yaiyjajy Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bjabiqrb Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zijqqrrz Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ