Static task
static1
Behavioral task
behavioral1
Sample
462389d3ca7c34bd50b313fb1f2fbd40_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
462389d3ca7c34bd50b313fb1f2fbd40_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
462389d3ca7c34bd50b313fb1f2fbd40_JaffaCakes118
-
Size
54KB
-
MD5
462389d3ca7c34bd50b313fb1f2fbd40
-
SHA1
3bfd468e82d3b8ddad4fc755ffa1e1ebd11fed8c
-
SHA256
fd1f2091d072bcb0cb25c231b6858b52f42000655ec7dbea26a5eab0e187d9ad
-
SHA512
3821386c1cad3dcf4a3476acb3af040b2a6845a7d76aa06728dd7ba736bf0edb099c78894a691650c9277ede65caa68ea270b10d731d4acdeb387b5294225dd6
-
SSDEEP
384:GSaQQA0vVGVIUt6MyMZ/ytji4oERfE0y679zL09hrX2JFU5Xtu:GSR50dkN6MyMZ/ytjirERfE0DJZFU5E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 462389d3ca7c34bd50b313fb1f2fbd40_JaffaCakes118
Files
-
462389d3ca7c34bd50b313fb1f2fbd40_JaffaCakes118.exe windows:4 windows x86 arch:x86
2f3c5da38e687ed8e68cd2b55dbd54f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE