Static task
static1
Behavioral task
behavioral1
Sample
fac4ba73176124687f212c800ac53a36_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fac4ba73176124687f212c800ac53a36_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fac4ba73176124687f212c800ac53a36_JaffaCakes118
-
Size
79KB
-
MD5
fac4ba73176124687f212c800ac53a36
-
SHA1
bb90bcd54a77613905fa3e7dcfac0c241ccb6967
-
SHA256
5e9fd7ade460f2d87b2a81ae871f9486dff3eed5871e8b74bcf2f42a7d677f01
-
SHA512
ff15a68cf79f37d3fd27b28b6a4635d9e30459658fe1ec7e525b7e841251b58ecaaf90becb3f3b4be7366d98fa712656563b5b840faaa605e3b473902e14963d
-
SSDEEP
1536:fdxriVulCfXNkTk01yKk1tiCjern7SkJUEbooPRrKKRjyS:1xriVulCPNkD1yKMtHC7jJltZrpRjy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fac4ba73176124687f212c800ac53a36_JaffaCakes118
Files
-
fac4ba73176124687f212c800ac53a36_JaffaCakes118.exe windows:5 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
Size: 15KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE