Static task
static1
Behavioral task
behavioral1
Sample
fd026c7ec35e76dc4f37612da2f63176_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd026c7ec35e76dc4f37612da2f63176_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd026c7ec35e76dc4f37612da2f63176_JaffaCakes118
-
Size
444KB
-
MD5
fd026c7ec35e76dc4f37612da2f63176
-
SHA1
4b047e0695657aad226ee8527a77004ca274f8ed
-
SHA256
28184f7141b0270bcedbd88cb06fd18a67e690855dcffd57935f591c001e5300
-
SHA512
18493b4e2bbdb2476504b60eb63f9e1b99e5043162bcd2ac60c8349f5620322d333fe947a669e1e3117dd1f8faf7d0701a1c1f5e9d9c26adfa4778b7f4392845
-
SSDEEP
12288:UhCz+mhWmbcVUbJhXNU1AJ1N9qnc+Snqkd/wPkNv6VVc:Uq+EnbJBGWz9qn3INv6VVc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd026c7ec35e76dc4f37612da2f63176_JaffaCakes118
Files
-
fd026c7ec35e76dc4f37612da2f63176_JaffaCakes118.exe windows:4 windows x86 arch:x86
50bd89437edd7d864944d03b054cdec4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SwitchToFiber
GetProcAddress
ExitProcess
GetPriorityClass
GetModuleHandleW
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 439KB - Virtual size: 439KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ