Static task
static1
Behavioral task
behavioral1
Sample
0a3b89c8fbfd968111eaad1a61768f8e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0a3b89c8fbfd968111eaad1a61768f8e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0a3b89c8fbfd968111eaad1a61768f8e_JaffaCakes118
-
Size
66KB
-
MD5
0a3b89c8fbfd968111eaad1a61768f8e
-
SHA1
79215fd76917f02285a5f7430879328bb791e30a
-
SHA256
4723464b42778cb3f82c1ac41d693c9609b9a63daa0062b89b1520cc278da335
-
SHA512
654e64e97508dd4d0ae76ffd062554af7e8ae5a7f06f71ecb5035dffbef00a0febf48f25292e250e05a45d0a3562bfb29ee2959c836d86e79ec1311b4f30f7f7
-
SSDEEP
96:HKxae5s2BVGEDqF9EDatYdx5wBLsD0JP6KGaCrrQ9hwshT0ZjOT56O:HKxx5skGE09EOtE2B16KWPmwshT016F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a3b89c8fbfd968111eaad1a61768f8e_JaffaCakes118
Files
-
0a3b89c8fbfd968111eaad1a61768f8e_JaffaCakes118.exe windows:4 windows x86 arch:x86
3cd3aba06a71a3fd4726d5e3e8f25b85
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
ExitProcess
Sections
.text Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE