Static task
static1
Behavioral task
behavioral1
Sample
f06db809bcca18214a06984ee10313f6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f06db809bcca18214a06984ee10313f6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f06db809bcca18214a06984ee10313f6_JaffaCakes118
-
Size
8KB
-
MD5
f06db809bcca18214a06984ee10313f6
-
SHA1
4d7ffc49260450eaa428ddd5db6a8441e51b4894
-
SHA256
17e059d5d3af757066f6ec4e99e9e26c6658910d25b0fc4490b174d447de7a03
-
SHA512
bb6237914e3d2ef2522e6701538396c2a16ad79ec0e9a344ab6223a3d4e1517f530193e258add7bb893eff335c9653ce24f4e84bd522d63e82d5c600b02aa49b
-
SSDEEP
192:GLlwZxiHYBHZ5pzlmNXEXALsl7usOwnilvcJp5W:Y2oHYBHZvzQXbshuup5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f06db809bcca18214a06984ee10313f6_JaffaCakes118
Files
-
f06db809bcca18214a06984ee10313f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
2eda502d39734c2a70c5e0d029966397
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
ExitProcess
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE