Static task
static1
Behavioral task
behavioral1
Sample
d0de5768cf4b23161b74c1e0731853fa_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d0de5768cf4b23161b74c1e0731853fa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0de5768cf4b23161b74c1e0731853fa_JaffaCakes118
-
Size
9KB
-
MD5
d0de5768cf4b23161b74c1e0731853fa
-
SHA1
8eaab7be6a6f20c42e5f538615264815753329ff
-
SHA256
8a651744940d9f2464d0d0311834937cbdb7d79f68a2d67ebd0203ce3f293f53
-
SHA512
f1c4c7d8aca0493f0498eb0dc684c906fa94a5342fadcb32ebfa99cd618458def7f604a7cb5c7f3185f2729b6eceeabd273cfe4a25651f1ceffaa3f1389e870c
-
SSDEEP
12:etGSGQBtLa/4bU+Ag5ibEVjyQQR1jDBYs7XznM5Bu:etGSVxa/4zAFbEVj9s85Bu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0de5768cf4b23161b74c1e0731853fa_JaffaCakes118
Files
-
d0de5768cf4b23161b74c1e0731853fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
b547b1487151c8557bcbc6c24574ec6b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ExitProcess
VirtualAlloc
Sections
.text Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE