Static task
static1
Behavioral task
behavioral1
Sample
465238dfec629682dc6af517a9b4c02b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
465238dfec629682dc6af517a9b4c02b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
465238dfec629682dc6af517a9b4c02b_JaffaCakes118
-
Size
47KB
-
MD5
465238dfec629682dc6af517a9b4c02b
-
SHA1
3f43ba3c058198391e32716b2bb11b33bc60797f
-
SHA256
c575060f0d386146c85de910c5f3d59d1c3096954ba5a2f8f2da3dc75b3e2dfb
-
SHA512
809bbe6e5159bdd8457ec0d90745281a7b0e1be524a277d6b97d1c6687ddceeffa29eccf83f04e90c851bc9fe35f7b41c9e96d339d0a2fca354c1b0fa8cd7c09
-
SSDEEP
768:mJvULZ+cKGWNU0XfYXNEQe80lyqCN6qdNUtjTk06BsrO3CpAqW70uZM:mdU9+cIfSERvlydYqjojTkPBQO3iW7PZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 465238dfec629682dc6af517a9b4c02b_JaffaCakes118
Files
-
465238dfec629682dc6af517a9b4c02b_JaffaCakes118.exe windows:4 windows x86 arch:x86
b71d8c1931cb0a297806c1529ed52c6b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ExitProcess
FindFirstFileA
GetCurrentDirectoryA
ReadFile
CloseHandle
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE