Static task
static1
Behavioral task
behavioral1
Sample
f0abdd648265f96279a0332d72628787_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f0abdd648265f96279a0332d72628787_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f0abdd648265f96279a0332d72628787_JaffaCakes118
-
Size
24KB
-
MD5
f0abdd648265f96279a0332d72628787
-
SHA1
9d0813b924d3ba0eb955a2df59a3b832e9edc362
-
SHA256
c06a94e100eb91664d8d1f855651724977ca6b2f3460d0fc489f00e9d1d5cf22
-
SHA512
e8ab869710bd562ab1a681434d3c277e9417b983ee0a80e393e1185d08b79a1679862756d7276f13ef000d3c38d15590b7988359728e2661692dee1ca5b9931c
-
SSDEEP
384:B5b32Ni2hrbrhwrJK8+SFmWSQgPRvsWqw7jmgKbHy77EQMpYZByha:B572c2VPrSmWSTqwEbHRL6Bf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0abdd648265f96279a0332d72628787_JaffaCakes118
Files
-
f0abdd648265f96279a0332d72628787_JaffaCakes118.exe windows:4 windows x86 arch:x86
7914544362d09cf9b2aa6025715d897b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
DragAcceptFiles
StrRChrIA
CheckEscapesW
kernel32
CancelWaitableTimer
DefineDosDeviceW
VirtualProtect
Sections
.text Size: 14KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ