Static task
static1
Behavioral task
behavioral1
Sample
256f2e9a432571ad9c71495561002509_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
256f2e9a432571ad9c71495561002509_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
256f2e9a432571ad9c71495561002509_JaffaCakes118
-
Size
373KB
-
MD5
256f2e9a432571ad9c71495561002509
-
SHA1
1e9251024702893d8ee4357d53699b2e20fc8d77
-
SHA256
0c71bd52ed0f9c0ca75305b72d9c6fb6d997f1f4a2320c623e47cf77c32ac6cb
-
SHA512
0b7737ed3e1aef872404f41aee6132b49e2726532a6ca7ed91eedbfd23c2e2078b69f9a25f550e43b312e9e6b5ff42cc1bcc664dbf822f6377d8adb1390e63e0
-
SSDEEP
6144:h5uVLa8jISiJJ4m7BfQCHzGwiAP5Uvlk5u915OuzLBLsySpOKDpUJ+e02oeR:fuNjb8BfzHzGJmIu6100CDpR2o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 256f2e9a432571ad9c71495561002509_JaffaCakes118
Files
-
256f2e9a432571ad9c71495561002509_JaffaCakes118.exe windows:0 windows x86 arch:x86
4d8e9e06f8e51550e3e5089179e9846d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
Sections
Size: 258KB - Virtual size: 732KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE