Static task
static1
Behavioral task
behavioral1
Sample
1275937b156accd2772656b14fac9a60_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1275937b156accd2772656b14fac9a60_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1275937b156accd2772656b14fac9a60_JaffaCakes118
-
Size
40KB
-
MD5
1275937b156accd2772656b14fac9a60
-
SHA1
d3dc2cbf35c477887c28a27ca68216e3a0b523ab
-
SHA256
29c7880eac91f267f63589709092ec40e720e8aa86180089f89d60fdbc342dee
-
SHA512
871e30c7ebdb888d27e27862b56eb2ae86d2957dd05bc71ca6912bd8e482eb56bd99812c16a3eba7fdf038e092024bcc717f68540ea1d10eb56729bea9df1fd7
-
SSDEEP
384:Z5VUaE7NiitZq1TCv0g9FwrOZ6A0q1uaCLNIeOzoe+eg86ByzNR0dk:Z5eaEgib0EFwo6A0oCDOUe+J2NC2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1275937b156accd2772656b14fac9a60_JaffaCakes118
Files
-
1275937b156accd2772656b14fac9a60_JaffaCakes118.exe windows:54298 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
ziyaiyja Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
jybjabiq Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rbzijqqr Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rzziibii Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ