Static task
static1
Behavioral task
behavioral1
Sample
393ea54e69df326ac1e25e4e976a92df_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
393ea54e69df326ac1e25e4e976a92df_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
393ea54e69df326ac1e25e4e976a92df_JaffaCakes118
-
Size
32KB
-
MD5
393ea54e69df326ac1e25e4e976a92df
-
SHA1
706765f722f41a3f7d03d375141d460d90938daf
-
SHA256
69f0a27fd9aae4bd841c3e88bf48584c9d2c3f519a293349e6e74f4b1aedcc1d
-
SHA512
29d454d0b717b45e7ff1826c7998398f8f887a57c3d1ab03a3fcee083ab9add54d6a82b57df48d4aca3dc5e187f6a5d27776254484c09bc4e23935784aa65252
-
SSDEEP
768:FR0IH55AEgzbKbl25U70OqBV3tGrHsmay+f+QnEXc:F2IHUUbg5UvqBZtOHJay+f+p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 393ea54e69df326ac1e25e4e976a92df_JaffaCakes118
Files
-
393ea54e69df326ac1e25e4e976a92df_JaffaCakes118.exe windows:4 windows x86 arch:x86
79f299efe1d4088ca971ddece2c0f622
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AddAce
CryptEncrypt
kernel32
GetCurrentProcess
SearchPathW
user32
GetScrollRange
GetInputDesktop
PackDDElParam
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ