Static task
static1
Behavioral task
behavioral1
Sample
2178a0a2f96cbd9a7fa52ba3967491f3_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2178a0a2f96cbd9a7fa52ba3967491f3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2178a0a2f96cbd9a7fa52ba3967491f3_JaffaCakes118
-
Size
22KB
-
MD5
2178a0a2f96cbd9a7fa52ba3967491f3
-
SHA1
1f1e921f54dedc0d466c7636dafed45042911779
-
SHA256
6ff7b54235b01f676063cf53220d3f74afc73da54efc2eb7c8145506d2e7615f
-
SHA512
f8a9d6d8458d9c6b7db2e50a71dd7980ed8bd60d66da39d4833945204c97eb03ad0b851fbac7e540f332b0f27a92827fce58c725cacb526e30217cf20f38b516
-
SSDEEP
384:bESREEhXB8FJ6eKOTfZdD2PiOJNOO1MRlmhRhb83VBVErGbNHfS5K/cpTvRe:AS9XB8FJ6eKOTfZdDulNOoMRox83FErU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2178a0a2f96cbd9a7fa52ba3967491f3_JaffaCakes118
Files
-
2178a0a2f96cbd9a7fa52ba3967491f3_JaffaCakes118.exe windows:4 windows x86 arch:x86
c2022d59063a3bee3e08b0792cf5ab79
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
select
kernel32
DisconnectNamedPipe
user32
MapVirtualKeyExW
gdi32
ExtTextOutW
advapi32
RegCreateKeyW
shell32
ShellAboutW
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ