Static task
static1
Behavioral task
behavioral1
Sample
fd68ebf50287f69cc24e5404f98bc499_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fd68ebf50287f69cc24e5404f98bc499_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd68ebf50287f69cc24e5404f98bc499_JaffaCakes118
-
Size
109KB
-
MD5
fd68ebf50287f69cc24e5404f98bc499
-
SHA1
1a1a3a3787b57964ee4ab393678b0fddc6cf12c9
-
SHA256
090fe4d9b8e7a6499b4beea72bf71387edaa239e8a8aad74e34c7845d341c7fc
-
SHA512
c7f4a87bfc9b0fe66230ebbc5e01c5518750e783a988dbb45b9daf6a4593b4d03e5bec8edeaec09f5a0e381b6a5a37ae7ea3532482e75e7b98bf4df17d006f5c
-
SSDEEP
1536:nissSMeJXLncGrND8wEYvZ+EFeiqBl296oEl9dLXhz+j0JeQ4aoMDcWHy52U:isHxJXlpD8wNvZNHvSdLXhSjyoai+jU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd68ebf50287f69cc24e5404f98bc499_JaffaCakes118
Files
-
fd68ebf50287f69cc24e5404f98bc499_JaffaCakes118.exe windows:4 windows x86 arch:x86
4d8e9e06f8e51550e3e5089179e9846d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
Sections
.text Size: 19KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ccg Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE