Static task
static1
Behavioral task
behavioral1
Sample
e126c9c975cc22e32f79d694eef579f6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e126c9c975cc22e32f79d694eef579f6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e126c9c975cc22e32f79d694eef579f6_JaffaCakes118
-
Size
132KB
-
MD5
e126c9c975cc22e32f79d694eef579f6
-
SHA1
57665b0e480632f971c12f656e99f95010bfeb9c
-
SHA256
04fe404db4db40163c52c7c4aafc1e3d7b5ae2d43aecf07a02a14e8f020849a6
-
SHA512
2211352dc9800d7de838137cab9bff9e89dbf0a0d10fb49830b40eaadc17eb03eedb9c5a6fa76dcb20d6d98d8a16db9dcddd152107e637a7d22b4e0081e877a0
-
SSDEEP
3072:UFG/xqy6x9geN/55EbmD3pDbsV4ki+SHbrj/xoJR/I:UFG/QykRN/TECbSNitbrUg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e126c9c975cc22e32f79d694eef579f6_JaffaCakes118
Files
-
e126c9c975cc22e32f79d694eef579f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
a6a3187c59fb6ec7c3381f43311fbcf6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CancelTimerQueueTimer
FindNextVolumeMountPointA
TransactNamedPipe
QueryInformationJobObject
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
itext Size: 8KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
data Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ