Static task
static1
Behavioral task
behavioral1
Sample
cff146af5e0fc014436bccbfe5a5bec7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cff146af5e0fc014436bccbfe5a5bec7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cff146af5e0fc014436bccbfe5a5bec7_JaffaCakes118
-
Size
59KB
-
MD5
cff146af5e0fc014436bccbfe5a5bec7
-
SHA1
543997b0ba9e61234e73e10cb696f210439b69b2
-
SHA256
d7c66d7f95f82422634c9a5b1d793cf32e7d6c1e192846c4b5e343a37899b3c3
-
SHA512
d130ac37a45986d3dc17c17799c25134ee59edfe07f22c2332f8cb48505d3ded4c4cd771a8bf75af611975cd42b200a3215feb901543a29ea7bf1705c452014d
-
SSDEEP
768:OuUVwzulRYaARVOmbZKc3hQDSlYzfg9omY+aczh30zZXnFAtlqx3KFCFgX7:pUVwSoaATO6+GlYzfg9azUoFAtlKzc7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cff146af5e0fc014436bccbfe5a5bec7_JaffaCakes118
Files
-
cff146af5e0fc014436bccbfe5a5bec7_JaffaCakes118.exe windows:21128 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
byqyajqi Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
aqjjrrzq Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yjaaariz Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
arrrziii Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ