Static task
static1
Behavioral task
behavioral1
Sample
3102171574759b1236c5b7cbd5a92c48_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3102171574759b1236c5b7cbd5a92c48_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3102171574759b1236c5b7cbd5a92c48_JaffaCakes118
-
Size
4KB
-
MD5
3102171574759b1236c5b7cbd5a92c48
-
SHA1
d940eafb8b4e8146a7cdfe70f8c0e921ac53f816
-
SHA256
e6071c852df10b04440dc619f894820db43e10925fa784fa8001984c0ef864ce
-
SHA512
c70b4eba2c136a0f9c0bea202fd8f193cb39675ca045c823fa2ec6680a219527a11bbc4755898602bf37c0187bb6044e63b87bff9f087835b7185623a2c2c4db
-
SSDEEP
96:wdJ5HmLN2LZgo0+BgFJE4ZRGAgbvtvCCCkk5i93q+YF+2jcP4t212Y:wlUN7ZFJxUAWfCG93jQZcPgz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3102171574759b1236c5b7cbd5a92c48_JaffaCakes118
Files
-
3102171574759b1236c5b7cbd5a92c48_JaffaCakes118.exe windows:4 windows x86 arch:x86
efde246d3fecb4db9bf89c79d184d9ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DdeQueryNextServer
Sections
Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE