Static task
static1
Behavioral task
behavioral1
Sample
cf6bf8bc4375f27459823b26a72190dc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cf6bf8bc4375f27459823b26a72190dc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf6bf8bc4375f27459823b26a72190dc_JaffaCakes118
-
Size
66KB
-
MD5
cf6bf8bc4375f27459823b26a72190dc
-
SHA1
16eaa8556c61530042701fbad345fe59dd4dd393
-
SHA256
0e842e7c29f4e2c078cbff1be80aa25a7bdd981c97f28a3595407e21d1dea851
-
SHA512
96191b4a8d12b78e30dc0bd02cea8c4cef6431e39d57b1cb8d2e7029e776a0559d5aadab4a125c3e0dc6b38df4a6fbe8d5e3492748730d9f9dff1ca3f833dc55
-
SSDEEP
384:qxx5tD6LaGcmbaR4sHQptE9dP4bmJLkZ5Cp0bMc:qn3DC/cmA4sw7E9dPpJLkyp0oc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf6bf8bc4375f27459823b26a72190dc_JaffaCakes118
Files
-
cf6bf8bc4375f27459823b26a72190dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
3cd3aba06a71a3fd4726d5e3e8f25b85
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
ExitProcess
Sections
.text Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE