Static task
static1
Behavioral task
behavioral1
Sample
256b47368b99a6189ff43db31140d63d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
256b47368b99a6189ff43db31140d63d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
256b47368b99a6189ff43db31140d63d_JaffaCakes118
-
Size
86KB
-
MD5
256b47368b99a6189ff43db31140d63d
-
SHA1
887d6ec5bed45762decbe27b68bc014aa93e9656
-
SHA256
e539904ddad23867c4cfd2cce3c0b2d85e5a45bfa551b498c1005e48b458d883
-
SHA512
e4ddca86d0a1a54e6670258b49b7485330e6db41abe2c4104db7bfc8065bfe7e5e9e70bcbe44db6d2c069e676c623f758f21ea9a601a1761096ac1dfe2457bd6
-
SSDEEP
1536:RtGKdZ2cBewkb00XBK//+DHeKjrkKFia5HkNlKputW+uzN5v:RtGMXQtFMmD+4rTF80F55v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 256b47368b99a6189ff43db31140d63d_JaffaCakes118
Files
-
256b47368b99a6189ff43db31140d63d_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE