Static task
static1
Behavioral task
behavioral1
Sample
ceb12a2d07275251233edf4ba82bce50_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ceb12a2d07275251233edf4ba82bce50_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ceb12a2d07275251233edf4ba82bce50_JaffaCakes118
-
Size
42KB
-
MD5
ceb12a2d07275251233edf4ba82bce50
-
SHA1
dce8791afbba4166564f221122923f82e0f54298
-
SHA256
7adafbdeb67c5f37f814a173a3264b9318dcdbbe29f776c433842f6df842d5b0
-
SHA512
aeb81d9162b30febf4fd42377f8c3c8008e80de49242392e3065c2178af5c6c3b553cd79b8ac16e8eb1df35b0d3832a1c06b2377f9a8a4700c9687542a0166a5
-
SSDEEP
768:h5iecFjZsD5C59bLv8IlvjgyKqqhud/GIMbPAi/B5+cPNJGht6rtNqv/4b:LiecF+9Cr/zBDKqqhud/GE8BIcPNJEwv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ceb12a2d07275251233edf4ba82bce50_JaffaCakes118
Files
-
ceb12a2d07275251233edf4ba82bce50_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 41KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE