Static task
static1
Behavioral task
behavioral1
Sample
542d82f58f28487860d860c76675fc78_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
542d82f58f28487860d860c76675fc78_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
542d82f58f28487860d860c76675fc78_JaffaCakes118
-
Size
97KB
-
MD5
542d82f58f28487860d860c76675fc78
-
SHA1
db3e8fb7dcad6d2def7a934be6ea9b33133ce166
-
SHA256
e3e6ac1da385e8cff10229879cd65d698af105c9badf0b3241a451882c55e127
-
SHA512
ef9a2a41e2ea6fdd93c1357e036381cd949985ebeed1bc4eb9525efdfca73bcee6e8bd7388c8f852491491a6df785df5be25dfd337975b323f07565965d0102e
-
SSDEEP
3072:gIyEwkV8xj603KaysU16/GaD3bS1Q4ClH1s:1ytV67ayza7bSex1s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 542d82f58f28487860d860c76675fc78_JaffaCakes118
Files
-
542d82f58f28487860d860c76675fc78_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 96KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE