Static task
static1
Behavioral task
behavioral1
Sample
d308b33260a0f377cfebf05ec20dc345_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d308b33260a0f377cfebf05ec20dc345_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d308b33260a0f377cfebf05ec20dc345_JaffaCakes118
-
Size
25KB
-
MD5
d308b33260a0f377cfebf05ec20dc345
-
SHA1
df46527fe24f83b552f324e8e83f71a7451c0fae
-
SHA256
2a5587f514048cd5a75b65aebb689cdefa1ce5a8f0e3216ac29216eacbebd454
-
SHA512
cb3d742fd84e668560646bdf86012e17898113b5a7d2cc1c084273e291bdfd5b7af475e3a925fe5d04237a7ab4afef908aa4bb75c0050804fc2ee3ad092b6ead
-
SSDEEP
384:Qfc37NnhLfRBnrNElpdT6wL4+iVzi6d7tq4Grz4+49JiJK0:XRhLRRrN6jTd4/Vzi6dt1GrEZ9JiJR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d308b33260a0f377cfebf05ec20dc345_JaffaCakes118
Files
-
d308b33260a0f377cfebf05ec20dc345_JaffaCakes118.exe windows:4 windows x86 arch:x86
330ae68fd35ae99521a0ac6a1fd9b999
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
Sections
�+Ky�r�� Size: - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
���U)/-< Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�4�r5G� Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ