Static task
static1
Behavioral task
behavioral1
Sample
d6839376e9f143e3ee6a19f73ad4c32c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d6839376e9f143e3ee6a19f73ad4c32c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d6839376e9f143e3ee6a19f73ad4c32c_JaffaCakes118
-
Size
4KB
-
MD5
d6839376e9f143e3ee6a19f73ad4c32c
-
SHA1
94da3be76bbb110d7f899c1bee1b608eb7f367eb
-
SHA256
a7463d80fb7d7d676763fccc3a5a3906e0037648d70139a4a2bfe4ba6274bd7c
-
SHA512
4d2ef262e06a79bef6882266cb776a35ac52b8a8f1aff59603ae76a77604e0942025fd1a671a3a2812b222e04db405554f365482cde38425f948126b25ce3904
-
SSDEEP
48:6xiB6cKmkBcqjPnQydeI8EQUrmljajJYmQU5DYjJgQxlQITcs6PZm8cJnlFnuRWn:wlc91YnQyAI3JKjaZTxc3llcsYPrLe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6839376e9f143e3ee6a19f73ad4c32c_JaffaCakes118
Files
-
d6839376e9f143e3ee6a19f73ad4c32c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ExitProcess
Sections
.text Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE