Static task
static1
Behavioral task
behavioral1
Sample
f9909a06e953cb4cf66fbd549601123a_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f9909a06e953cb4cf66fbd549601123a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f9909a06e953cb4cf66fbd549601123a_JaffaCakes118
-
Size
52KB
-
MD5
f9909a06e953cb4cf66fbd549601123a
-
SHA1
05f0ec6d94156907108e317d33d42dd31135a0d2
-
SHA256
69ab7a6cdf73f9b9598d8337a3a47c1237860cfef2d2ca59fdc9417970ab9ebd
-
SHA512
38d2d7eb4c0bde46ae0a3cd9fdfdc2bc8a67191cdcf9f2fd65d43ae6ea797d4751c642918f5ffbe7e32490cb9bed12709cc005b979185fbb37e1ec26b351b001
-
SSDEEP
768:lHVlthGu65Wk/MXlgc/E7S1eq7Rgm7Q7I9ppqAAO9Ud3wknHq4OXxAiTDXr:l1ltRfrM9qO/CmAA3NnonDX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9909a06e953cb4cf66fbd549601123a_JaffaCakes118
Files
-
f9909a06e953cb4cf66fbd549601123a_JaffaCakes118.exe windows:4 windows x86 arch:x86
5f7c1c5f782810323dacf24bcb0e83db
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
ExitProcess
Sections
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 110B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 245B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE