Static task
static1
Behavioral task
behavioral1
Sample
1637afe8735f877f7681a8f5bb09f85a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1637afe8735f877f7681a8f5bb09f85a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1637afe8735f877f7681a8f5bb09f85a_JaffaCakes118
-
Size
22KB
-
MD5
1637afe8735f877f7681a8f5bb09f85a
-
SHA1
79f98cf46099bd29468b05ff7a8e9ff0af6255a4
-
SHA256
6b583dbee7c5edc14d46e4f5a9a6b30892ff74c4d075e442636300c2ca93d3eb
-
SHA512
a5c5bc9a26ae01fd536c8e0a500628c6380210bb52f1992b7f512377ec642340ae008fc865f89244b059085db12c19e011ce49e17955ed6a494f6fd65ad43d12
-
SSDEEP
384:VrAJ8OHsPK6truwp+EFCuj0+1r1G2Wc5Pm4tsXcJEkvHz2+n:auOMt+EF51GLAdxvT2u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1637afe8735f877f7681a8f5bb09f85a_JaffaCakes118
Files
-
1637afe8735f877f7681a8f5bb09f85a_JaffaCakes118.exe windows:4 windows x86 arch:x86
d2ffc2832b0a195ed606de41fbce2161
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
CharUpperBuffA
Sections
.text Size: 512B - Virtual size: 34B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 150B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE