Static task
static1
Behavioral task
behavioral1
Sample
07771fcc1bfac3ea05c28d4a68eab4cb_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
07771fcc1bfac3ea05c28d4a68eab4cb_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
07771fcc1bfac3ea05c28d4a68eab4cb_JaffaCakes118
-
Size
30KB
-
MD5
07771fcc1bfac3ea05c28d4a68eab4cb
-
SHA1
c40fdfe4ea4bc188fbf7e6743436890f731d5b8b
-
SHA256
60a6f4c4d182f815d587a163b7eb7d03cef3c01f81c83d7563864e681bbb3519
-
SHA512
2de0f92de23151bea010ceb1929ac027cfa55577a8c1f340019f12938a72ea6510415d38aacb8a8fa0bc4153d21e5e1841a032dc32dbb7663e1708f16a17cf93
-
SSDEEP
768:KuFk+/4/e9TJS9bYkJTt2DKbYTQWe2pf+:KuFL/UWi9XUMWZW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07771fcc1bfac3ea05c28d4a68eab4cb_JaffaCakes118
Files
-
07771fcc1bfac3ea05c28d4a68eab4cb_JaffaCakes118.exe windows:4 windows x86 arch:x86
710f454264a41a967a3a21098b540598
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CancelIo
user32
PostQuitMessage
SetTimer
SetProcessWindowStation
CloseWindowStation
GetProcessWindowStation
gdi32
GetStockObject
Sections
.text Size: 1024B - Virtual size: 946B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ