Static task
static1
Behavioral task
behavioral1
Sample
f6dada5e9a6238fd38ca9e7aa783bb11_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f6dada5e9a6238fd38ca9e7aa783bb11_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f6dada5e9a6238fd38ca9e7aa783bb11_JaffaCakes118
-
Size
8KB
-
MD5
f6dada5e9a6238fd38ca9e7aa783bb11
-
SHA1
f1ce8f88eacbbec0970fcf044ae22ef407b7fef3
-
SHA256
c940ec33b4c56bd3651ddd96e949d6124518823f7cc0d42cbb880b6e37fadeda
-
SHA512
d2aeff2b7d7e376fa2eeb3b6585c28911d5a1133eda4ed20dc8eabc9e7bbba1a5f17a626e14dd3c1aeb1625a63c6fe54078ac318ecf9fb356ed99f805a373b9a
-
SSDEEP
192:SSJMXYNQLttTEGC5bMYdlqilraTSlGxYj/zJYw1OYVPLa5sto:rJMnfoG+Tqi1aTSLpYODPuW2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6dada5e9a6238fd38ca9e7aa783bb11_JaffaCakes118
Files
-
f6dada5e9a6238fd38ca9e7aa783bb11_JaffaCakes118.exe windows:1 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
����t Size: - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����a Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE