Static task
static1
Behavioral task
behavioral1
Sample
ce9ffa448bf7997b723f1be294011a25_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ce9ffa448bf7997b723f1be294011a25_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce9ffa448bf7997b723f1be294011a25_JaffaCakes118
-
Size
24KB
-
MD5
ce9ffa448bf7997b723f1be294011a25
-
SHA1
8fc159b0150c17f9ce51bd3244ed6b57d091548f
-
SHA256
2f536a3c8755b81b825d60a124b18a3f059a3ac213514afbe1fc5734bc437c74
-
SHA512
d07652cc9c12c07f4cd11f9c2dcf0af911e1c495db99f175f0ab8dd61a6fbed7811c4021c6a2d02d524555af32d32b6f95ffd36b8301b2fdde6342159a1a7097
-
SSDEEP
384:VkHvrescyPte3NaZ0T1RFVaQXSNnDRT/tntNXs3mY:oCscMZOrFzi5DRTRu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce9ffa448bf7997b723f1be294011a25_JaffaCakes118
Files
-
ce9ffa448bf7997b723f1be294011a25_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE