Static task
static1
Behavioral task
behavioral1
Sample
1799827b43353471fa07ceef99ee3e1b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1799827b43353471fa07ceef99ee3e1b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1799827b43353471fa07ceef99ee3e1b_JaffaCakes118
-
Size
6.7MB
-
MD5
1799827b43353471fa07ceef99ee3e1b
-
SHA1
fd9bbaecc93b36d22c3058aaf30074c38c731894
-
SHA256
a1627f65ba8b57675a27631bbe3c5d5fbc46217df508ba3020ac30831f769700
-
SHA512
b0a8802660e3d546f991b82b72a76ec06e6ad9d363b1c91c80419e6f30e17ea931a44e0b6ac9549269255d8706b5b9e434ed7baefa8496711a158103f0a6897f
-
SSDEEP
98304:aMutfQ+9sslDGzmXGDDHzR/qQfFzkzP6+ZYvBwOF76IIdbfzKLu2iMquLeXr+Fw2:a5R7swDXXGDDHzR/Niz/ZyeJzzKW7e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1799827b43353471fa07ceef99ee3e1b_JaffaCakes118
Files
-
1799827b43353471fa07ceef99ee3e1b_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.nos Size: - Virtual size: 420KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 290KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ