Static task
static1
Behavioral task
behavioral1
Sample
307f5289a40879c90c9987e1c221f487_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
307f5289a40879c90c9987e1c221f487_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
307f5289a40879c90c9987e1c221f487_JaffaCakes118
-
Size
27KB
-
MD5
307f5289a40879c90c9987e1c221f487
-
SHA1
f15106433b10a4fb3004922b2a48dde67b773f08
-
SHA256
1de92d65f1f5170959c931d3bcb27b2524c4d78a1d2ad321e83d3a946d188f02
-
SHA512
bb43e08d977f09c849d787caa3ac6372f28bed9d484acc08629f065af08ec84e112cabd4d622b95998f394b2c3d3050fac99556c6257e02edfe651d05412dd2b
-
SSDEEP
384:5rZ8ccFO6LM4iFcn/orkH0EnfYuSVjP/N4LEXK9SInMp+krA2nOWbWFjcYq/t:RUe4iK/ooWuO/NAhYInlktOYY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 307f5289a40879c90c9987e1c221f487_JaffaCakes118
Files
-
307f5289a40879c90c9987e1c221f487_JaffaCakes118.exe windows:4 windows x86 arch:x86
b5c0892fa36495b498d09f7c10228f02
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
Sections
4��U)��� Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
��]� �� Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
\l�)=�� Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ