Static task
static1
Behavioral task
behavioral1
Sample
0cfd01adec0fdbe8322530827fb21a7a_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0cfd01adec0fdbe8322530827fb21a7a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0cfd01adec0fdbe8322530827fb21a7a_JaffaCakes118
-
Size
141KB
-
MD5
0cfd01adec0fdbe8322530827fb21a7a
-
SHA1
e9295e6a6944209fedab1a22b95fd82c01bca134
-
SHA256
9f2ed05270ae48fdcd0e6a85da8fc7500f5d7fb5f33f95048e6d7b465dcd67ef
-
SHA512
2330fd0cda35fbbbd684e8ac9e1b6bb803efd52361c501abd03e6079fb97c41fd5025036855e5cbfd4a327a7a73363216f55fec271ebebe231125dc971677ef7
-
SSDEEP
3072:3zEXJqimp8g6WsoNBiH95P1iAMUgbFNcF9/WvfIqbd7pdrJZe:2Ji61obin4J3bnU9evAqbFrJw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cfd01adec0fdbe8322530827fb21a7a_JaffaCakes118
Files
-
0cfd01adec0fdbe8322530827fb21a7a_JaffaCakes118.exe windows:4 windows x86 arch:x86
991fb697774655f7ca137f1622eca325
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
user32
DispatchMessageA
TranslateMessage
GetMessageA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 123KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ