Static task
static1
Behavioral task
behavioral1
Sample
d2e20293b21a437d494c416463080d84_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d2e20293b21a437d494c416463080d84_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2e20293b21a437d494c416463080d84_JaffaCakes118
-
Size
14KB
-
MD5
d2e20293b21a437d494c416463080d84
-
SHA1
a7154d60e4153bd94a42d2fb76ea2bd009002aa0
-
SHA256
368dcaa02df663922cc2cc2bf5e776ffb312647fef447899df599bf145a2a479
-
SHA512
199d134f44a01c5bade4682e08c362ae2eb89f0c754135facabb5077a6e45acd25726c83476eb9ee4c13e36ada17242b238d09d8d077961616859cb14877f24d
-
SSDEEP
384:czsX8Mc/zh8D1upMv7TC0CaN3Px3x1QCD0f6yyFQk:O/zh8hmMv7my3Px3wS0fkQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2e20293b21a437d494c416463080d84_JaffaCakes118
Files
-
d2e20293b21a437d494c416463080d84_JaffaCakes118.exe windows:4 windows x86 arch:x86
b71d8c1931cb0a297806c1529ed52c6b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ExitProcess
FindFirstFileA
GetCurrentDirectoryA
ReadFile
CloseHandle
Sections
.text Size: 14KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE