Static task
static1
Behavioral task
behavioral1
Sample
575e862860682b8b189c15a0c86873a9_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
575e862860682b8b189c15a0c86873a9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
575e862860682b8b189c15a0c86873a9_JaffaCakes118
-
Size
100KB
-
MD5
575e862860682b8b189c15a0c86873a9
-
SHA1
c98b3a28d60ff951ccc6576672be313d55ab839b
-
SHA256
022e8b774903af2676f23151658739f18375efbe37cccf8a99518e8b8f28ec2f
-
SHA512
69db479e1be8a2265a18115b0af1cfd840966e9c2f227faf5085217a41f77a21b39d614d974540d0330d17efca160c2ac2d6b55e5ce0e0cfade6a8004a3309e3
-
SSDEEP
1536:h0eSgU8G7+MdbABlVJKJTjRVJrey2kI6ROs+ARXI1y0V4dQ2:h0tgg7+OABlVYBVJDRX+AWb4dD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 575e862860682b8b189c15a0c86873a9_JaffaCakes118
Files
-
575e862860682b8b189c15a0c86873a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
.text Size: 70KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 23KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.teraphy Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE