Static task
static1
Behavioral task
behavioral1
Sample
08f5ab5c03111e516dc7a467ed8cea47_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
08f5ab5c03111e516dc7a467ed8cea47_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
08f5ab5c03111e516dc7a467ed8cea47_JaffaCakes118
-
Size
32KB
-
MD5
08f5ab5c03111e516dc7a467ed8cea47
-
SHA1
fd83d512ac0bd35ee2c9b69321e0a5a8f2c262c3
-
SHA256
a1e20482cb8534674b8cb0a59ce462492b4e59fe74f6b1abb3e013ebe5f05b24
-
SHA512
ceadc8cf83fc500e8707658571d66b57621c9139cc8ea3c509c51a34225cd30c082cecf0e4c6b99f2a250d9d7afa647fa9811467a958c437ca8073f5c64bc070
-
SSDEEP
384:g33FWrsUYMrPWBez8tNwo5NtaEZ2pwBalL0jsGvwZkHCCoOk:CHM7WQwwovc8YwAlLyshZIPk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08f5ab5c03111e516dc7a467ed8cea47_JaffaCakes118
Files
-
08f5ab5c03111e516dc7a467ed8cea47_JaffaCakes118.exe windows:5 windows x86 arch:x86
4cc8d139add458350cac906b4ca9a3c6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
ole32
CoCreateInstance
CoInitialize
CoUninitialize
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE