Static task
static1
Behavioral task
behavioral1
Sample
1723e467458ca5c52556799661231fd0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1723e467458ca5c52556799661231fd0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1723e467458ca5c52556799661231fd0_JaffaCakes118
-
Size
50KB
-
MD5
1723e467458ca5c52556799661231fd0
-
SHA1
c58c057a624cbab55bab5981b980baddc444cf4c
-
SHA256
00e7cb3639e70034f47772b2c0175d887cb4f90f1c866f142c71f860d6ff1e5e
-
SHA512
e7d63520a950693a16d9c107f746d9abd1ce470b5f28e62243533c5a6dca24f3c1c024194852f96452d9e320dec1779648754503232c641cd2d57ea12d9446e8
-
SSDEEP
384:UJGdl8NlY7EjCSZv/l8UCSGz5aQdTspoUD3Uni2PRIf3TcIm3tAddk:VlAcEjxZZu14zDEniaRg3TDd2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1723e467458ca5c52556799661231fd0_JaffaCakes118
Files
-
1723e467458ca5c52556799661231fd0_JaffaCakes118.exe windows:9626 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
qyajqiaq Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
jjrrzqyj Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aaarizar Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rrziiirr Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ