Static task
static1
Behavioral task
behavioral1
Sample
d0a36ac5b7abac15e6b57f43efb34e31_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0a36ac5b7abac15e6b57f43efb34e31_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0a36ac5b7abac15e6b57f43efb34e31_JaffaCakes118
-
Size
32KB
-
MD5
d0a36ac5b7abac15e6b57f43efb34e31
-
SHA1
22ae8ab8e269d175e28b1020c300a6ac3618c7b3
-
SHA256
c833833d548d7e630d95bb84e3e2eb867d83ce36a61109efc07a1671ebc72b8d
-
SHA512
eec9b96de93cd65d4fe2ac74e6c84984428f8175d3de182e675e43c4f8327298bcd01605a370d249b372f2e2c3ec43deb2612e0ca5d1ea8607bff180610b33bf
-
SSDEEP
768:2/7hLi6kGSV1O/k7e0wTf8q+sW3IcjPPobwEQEqAoll3d:zkSV1v78Tf81sVcjPP4Bolz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0a36ac5b7abac15e6b57f43efb34e31_JaffaCakes118
Files
-
d0a36ac5b7abac15e6b57f43efb34e31_JaffaCakes118.exe windows:4 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
Sections
Size: - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vip Size: 512B - Virtual size: 520B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8way Size: 504B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE