Static task
static1
Behavioral task
behavioral1
Sample
24eea35d8c015ace63823233766b7172_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
24eea35d8c015ace63823233766b7172_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
24eea35d8c015ace63823233766b7172_JaffaCakes118
-
Size
21KB
-
MD5
24eea35d8c015ace63823233766b7172
-
SHA1
c991c306832bb0823a1a2df8ec390d1efe9e1034
-
SHA256
d6470a55a7ba0567eca7ebf7ebe5fbe8b4da7937d847d312f8b381ff6c9028ab
-
SHA512
6c8fdab5502eb15335fd2b619681ae95a3e49d9d62b18f4fb889dab3329c4af2ea45d9c7629f66408daeba0cc2fdf06328aca923aa412eb8a40a1f0cde575d59
-
SSDEEP
384:2miiWs2Du8/FQ/cE0FQMAbzgwokk8iQDGKGpb7Qfyr:j92Du8m/cv+M+FGK6HQfU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24eea35d8c015ace63823233766b7172_JaffaCakes118
Files
-
24eea35d8c015ace63823233766b7172_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE