Static task
static1
Behavioral task
behavioral1
Sample
257e0c356caef68c52e61e45039c66bc_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
257e0c356caef68c52e61e45039c66bc_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
257e0c356caef68c52e61e45039c66bc_JaffaCakes118
-
Size
1.1MB
-
MD5
257e0c356caef68c52e61e45039c66bc
-
SHA1
75565c6025c253176ac58e08200dc4fe501eab20
-
SHA256
45925f3c3196001f157d44ef2489d0ef5b83d22e4f97b02d07c95ae9899c7336
-
SHA512
7f38cfa582e90a8bb72a6cefc9f187ceb84dfbee2dd5c61118595a9e8c8b4aa6dceb3857c45c3ef59b82a449e55036a3a574681027e96d09802481304307db78
-
SSDEEP
24576:Hjleq0+l36jWM6uEOTN6Ebd6iCqYmNiiqtg3N46GpGq:Dleq0+lKjWM6PC6ikipYmATmNGpGq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 257e0c356caef68c52e61e45039c66bc_JaffaCakes118
Files
-
257e0c356caef68c52e61e45039c66bc_JaffaCakes118.exe windows:5 windows x86 arch:x86
a7d72e6e4b10a2c7bf1511e329e77123
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32 kernel32
SetScrollPos ��
Sections
.text Size: 564KB - Virtual size: 900KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 480KB - Virtual size: 480KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ