Static task
static1
Behavioral task
behavioral1
Sample
d1b0e6b8027f2750b52191e1129e0e5d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d1b0e6b8027f2750b52191e1129e0e5d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d1b0e6b8027f2750b52191e1129e0e5d_JaffaCakes118
-
Size
5KB
-
MD5
d1b0e6b8027f2750b52191e1129e0e5d
-
SHA1
82ce7e4cc779724d9b3086500675022123a277c9
-
SHA256
f4de1cfd31302e2f6aef538d9ab5cdf08bc232798a5b0d20aa988c7cc657a3bd
-
SHA512
a8b1290d255fb430d1d55ed1c41e6746a2cef90286485bd96bd0cd79b1af0bc04071491974ae7333aa389ece7d7cdd7740e9d9875df034227eab905aa7e769b9
-
SSDEEP
48:x9klzRne6bkdNF+NgR7oA1ywirUlOOb62K4Ul9zNE:slzHkdKNgR0AcwirUlOOBUlJNE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1b0e6b8027f2750b52191e1129e0e5d_JaffaCakes118
Files
-
d1b0e6b8027f2750b52191e1129e0e5d_JaffaCakes118.exe windows:4 windows x86 arch:x86
2f3c5da38e687ed8e68cd2b55dbd54f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE