Static task
static1
Behavioral task
behavioral1
Sample
ceaa123f4ab1794149467fa0f07b1d38_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ceaa123f4ab1794149467fa0f07b1d38_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ceaa123f4ab1794149467fa0f07b1d38_JaffaCakes118
-
Size
47KB
-
MD5
ceaa123f4ab1794149467fa0f07b1d38
-
SHA1
72a99f1c7954a3699adabbb979a97d37dd880b5b
-
SHA256
55680717ebfff2a4fc7cd6a62c44b7c38854d77b7a4365a359e44a4a1fa01319
-
SHA512
94bd05e18114e9bfcd2d2704463d606bec73131c4aafeb051f5704ae4fea861438485ab9baacf463bbb356811d923ec18f20c7746e1258a03a521453c59a6544
-
SSDEEP
768:CGlQoH+3isN7we/HUk3OrhFmcwkJtM8vFvOHUne8t8P/:Nl7le/J3GQwO8vFvG6e86P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ceaa123f4ab1794149467fa0f07b1d38_JaffaCakes118
Files
-
ceaa123f4ab1794149467fa0f07b1d38_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_TEXT2 Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE