Static task
static1
Behavioral task
behavioral1
Sample
0ee29933b09cf9262e9ca91c64901d56_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0ee29933b09cf9262e9ca91c64901d56_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0ee29933b09cf9262e9ca91c64901d56_JaffaCakes118
-
Size
27KB
-
MD5
0ee29933b09cf9262e9ca91c64901d56
-
SHA1
abd9fd45be4978639ed20eabd1b34c8408d8035f
-
SHA256
6c1ed01483683efdc197693cafe7971e21330e01ec11639df63c8628259c01bb
-
SHA512
e3bcb4931ad4200df5f59f616e7f437e9b30828a2a32fb860f109c528147a96bd7f9e56b4142369d274da13b1de7036b6091d846ba62f79f3f63234a09e455ef
-
SSDEEP
768:I9p4t+yi1E3riBXgOb36lXUfXq3snyvDehx7NX:CRyiASgG6lEvwMyv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ee29933b09cf9262e9ca91c64901d56_JaffaCakes118
Files
-
0ee29933b09cf9262e9ca91c64901d56_JaffaCakes118.exe windows:1 windows x86 arch:x86
b71d8c1931cb0a297806c1529ed52c6b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ExitProcess
FindFirstFileA
GetCurrentDirectoryA
ReadFile
CloseHandle
Sections
.text Size: 27KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE