Static task
static1
Behavioral task
behavioral1
Sample
2a422f1a23e6d0fb3e303de4c9b0d491_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2a422f1a23e6d0fb3e303de4c9b0d491_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2a422f1a23e6d0fb3e303de4c9b0d491_JaffaCakes118
-
Size
17KB
-
MD5
2a422f1a23e6d0fb3e303de4c9b0d491
-
SHA1
1e751edd815c7c98aa6b6833c740a4f0f3aa7fa4
-
SHA256
a2f9abf7e4b9638419e9bc8afabe758099063ee2613489302415ecf0ba23f510
-
SHA512
50e05fb705e9d33e0a64a55c08f7bb8226bf847b2377581e23ff99b0282daa86cb5f82e30b23c8d8ea0ad418f9b7f53abc8c3942c8c02acb48ac73f07f78a898
-
SSDEEP
384:/VxlT8RKmxojY7FeGE5V7lwqXJ8Q38e0WxhSLh4BtDDoiGuGX:bN/k9heG47P8i8e7RBxDoB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a422f1a23e6d0fb3e303de4c9b0d491_JaffaCakes118
Files
-
2a422f1a23e6d0fb3e303de4c9b0d491_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ