Static task
static1
Behavioral task
behavioral1
Sample
e1985f39d4e5e56f595af2e43a91a103_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1985f39d4e5e56f595af2e43a91a103_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1985f39d4e5e56f595af2e43a91a103_JaffaCakes118
-
Size
22KB
-
MD5
e1985f39d4e5e56f595af2e43a91a103
-
SHA1
b54555cbede0ed0067212fd6f8ef333581444431
-
SHA256
f309778cde7626a3f2bccd9a6a7856173b090482a43c2e396ba7fd68b984a384
-
SHA512
a17334a5d28bc1866023d578770e5a001d2d526826fe74194e30de143f355a3f9d21e0555df27be1ad6da7baec883e8fa141d735c4449ef27e6c334b62e973ea
-
SSDEEP
384:YGL1fMrkf2ReOslhbvUahU6ZSLlGeiz5vnLDzGvARQ2D/B/ruj5A6e/kE4:Yw+rghbX7wcl5v7kQQ2D/B/rMvw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1985f39d4e5e56f595af2e43a91a103_JaffaCakes118
Files
-
e1985f39d4e5e56f595af2e43a91a103_JaffaCakes118.exe windows:4 windows x86 arch:x86
94c7366d739e7bf962bb011f2c5fab76
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GlobalAlloc
ExitProcess
Sections
pcs1 Size: 20KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pcs2 Size: 1KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE