Static task
static1
Behavioral task
behavioral1
Sample
d4cb6cb096d7ef51953d254788787192_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4cb6cb096d7ef51953d254788787192_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d4cb6cb096d7ef51953d254788787192_JaffaCakes118
-
Size
14KB
-
MD5
d4cb6cb096d7ef51953d254788787192
-
SHA1
1c7daee0caf60d5e89a32d09f60437612e3c05b6
-
SHA256
299e06099be3f5c95fb037e513e4b3e011c4e51d201f4d74ec9b64d26cdfeba6
-
SHA512
f600ba415413fd9025d1c1957b8c7b9621887c4972a5c752549d7416a3ffb078d1369093214cd80302041e7260a60f670a71d4680145d245ec6be52a3210a539
-
SSDEEP
384:gzsJSKhH0qAp776mKTjT6nNj2t31viToVJNpvnLriy5qA:mKS77U3T6ot1vFVvpvLriyx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4cb6cb096d7ef51953d254788787192_JaffaCakes118
Files
-
d4cb6cb096d7ef51953d254788787192_JaffaCakes118.exe windows:4 windows x86 arch:x86
b71d8c1931cb0a297806c1529ed52c6b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ExitProcess
FindFirstFileA
GetCurrentDirectoryA
ReadFile
CloseHandle
Sections
.text Size: 14KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE