Static task
static1
Behavioral task
behavioral1
Sample
280ac8d19597f139822c27aa6e34a25d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
280ac8d19597f139822c27aa6e34a25d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
280ac8d19597f139822c27aa6e34a25d_JaffaCakes118
-
Size
115KB
-
MD5
280ac8d19597f139822c27aa6e34a25d
-
SHA1
7ace956b514641b9010e0845f60e5381d612c223
-
SHA256
2c4c5af58405620b6a92e2328c24b653aceacc16fc48c2231206c400565229ca
-
SHA512
44bbb448114db710437159b5028fa97a6f6de2266a451d7579a89f569ea48077018fd88ef51873c534fa402c8358d9ec507ca3224544efa09de3f404c7d4a845
-
SSDEEP
3072:0cFHyVNwzcmC73qx5RW2g7+XmVxINem8RAno50phO:zpWAcr3qXRW2i+XS+hJnHhO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 280ac8d19597f139822c27aa6e34a25d_JaffaCakes118
Files
-
280ac8d19597f139822c27aa6e34a25d_JaffaCakes118.exe windows:4 windows x86 arch:x86
0a240d6695be5234f84a61418d7d478f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetDriveTypeA
VirtualFree
Sleep
ExitProcess
user32
GetMessagePos
Sections
.text Size: 512B - Virtual size: 286B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 233B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ergerg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ergerg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ergerg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ