Static task
static1
Behavioral task
behavioral1
Sample
420422a6be8baad4d9e9e2a5ce2ad609_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
420422a6be8baad4d9e9e2a5ce2ad609_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
420422a6be8baad4d9e9e2a5ce2ad609_JaffaCakes118
-
Size
16KB
-
MD5
420422a6be8baad4d9e9e2a5ce2ad609
-
SHA1
9af7803723575e61284d8b2ee4a14ffdb754b096
-
SHA256
1237dda7bb329cf3d4cb35e3b561821ca0cb8b605fc502d298669065f94f4fd8
-
SHA512
e78223fe42faef7cb4dc32166383f0b61253a4e0f4298bc6df583ab2fd5e9ed02d10b444279435d0f07589be6c528d4e2b094723b16904f8e3753cde62bd9712
-
SSDEEP
384:NiDRgiv73SgZN3lCrQbnR04pidpthnQn9un:Ni/T2rQNpidHhQ9u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 420422a6be8baad4d9e9e2a5ce2ad609_JaffaCakes118
Files
-
420422a6be8baad4d9e9e2a5ce2ad609_JaffaCakes118.exe windows:4 windows x86 arch:x86
8456c1a91f2276de9af4257da3f240c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
VirtualAlloc
GetProcAddress
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 138B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ