Static task
static1
Behavioral task
behavioral1
Sample
fd872ba27581cfe3c683d51c23a4b481_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fd872ba27581cfe3c683d51c23a4b481_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fd872ba27581cfe3c683d51c23a4b481_JaffaCakes118
-
Size
52KB
-
MD5
fd872ba27581cfe3c683d51c23a4b481
-
SHA1
d7d660694140016153cfe3389b6d410f13bba36d
-
SHA256
c8eafdefe38af6de25696a7956f035d8c775fa4ed7e0f56f1241c98107be8534
-
SHA512
bd1defe4b6e5b66572484585b638916eff6aceb7b239a577fdd912881e651730d77cf82a63cdebe16a983df753e4685aea31d708718fb9eb385be968dfc87536
-
SSDEEP
768:yI0q0cU5cfGgBkv071Bu9U/+sVvtoXMo1eHI:Z0P5cf80hBilsZOXL1cI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd872ba27581cfe3c683d51c23a4b481_JaffaCakes118
Files
-
fd872ba27581cfe3c683d51c23a4b481_JaffaCakes118.exe windows:5 windows x86 arch:x86
882a93eaa965165392b7c99c7b8d148d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryW
LoadLibraryA
GetModuleHandleW
GetModuleHandleA
CreateFileW
lstrcatW
GetWindowsDirectoryW
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dd Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dd1 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dd2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ