Static task
static1
Behavioral task
behavioral1
Sample
0ae1f23ddc57e47a676e20478e826e52_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ae1f23ddc57e47a676e20478e826e52_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0ae1f23ddc57e47a676e20478e826e52_JaffaCakes118
-
Size
114KB
-
MD5
0ae1f23ddc57e47a676e20478e826e52
-
SHA1
5fed95991f9d3a8b054cebf859958f9d323bef13
-
SHA256
ea17c4135ea69d73809f8cd62cc5b088fe8dca9ef733753fe7f70dcdf702d62b
-
SHA512
8d67c6fb52ecd8c9a42c13d432b601d9268514c831164e4266feb53239df2d663136fed0904e582a1c16add68f9dd6200f8f42a42c2e48d01a54e6f6b2ca5d45
-
SSDEEP
3072:KMJKt2BBIGSL+/vRbCg5l4P6Savq+1ix1:KMJVYGi+xGgL4+vqSix
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ae1f23ddc57e47a676e20478e826e52_JaffaCakes118
Files
-
0ae1f23ddc57e47a676e20478e826e52_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 111KB - Virtual size: 692KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE