Static task
static1
Behavioral task
behavioral1
Sample
1679f101ca3fc52c9945af9e5df6c681_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1679f101ca3fc52c9945af9e5df6c681_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1679f101ca3fc52c9945af9e5df6c681_JaffaCakes118
-
Size
22KB
-
MD5
1679f101ca3fc52c9945af9e5df6c681
-
SHA1
050eeb63bd8d1b3755de03d48f75c0918cda7779
-
SHA256
74b60006ffc15e410405253842e3a6f7c1f09a79dbf9a95332146742bfc868bc
-
SHA512
75ca1947384d7124e23954c0b102e818d5cff22ffe605b4a9e0efce48a07cfac2f10f7c392c2846c57506b63b223f4b3b6e9726a1313bfe13d07497ead407706
-
SSDEEP
384:HrdS6zU8T1PvMugG77DeQpjHFZ1at12WWKVWhQJ6xYfDUL1yn4HF:HrdS6pL76IHRm1ThVEyYLbH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1679f101ca3fc52c9945af9e5df6c681_JaffaCakes118
Files
-
1679f101ca3fc52c9945af9e5df6c681_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 20KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE