Static task
static1
Behavioral task
behavioral1
Sample
411285df6e136317e7e8dc65f8cacc2f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
411285df6e136317e7e8dc65f8cacc2f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
411285df6e136317e7e8dc65f8cacc2f_JaffaCakes118
-
Size
111KB
-
MD5
411285df6e136317e7e8dc65f8cacc2f
-
SHA1
527dded621a5e226dc757b9c95951d4e8f03f7ff
-
SHA256
dd1794f976dac081d8dc718ce616ebfe0f92bc7ca71981afc6bafb37b4023e46
-
SHA512
a6812818f73107b14d6a85956ecfcfae2cf721e38a84b905a3fe409cf1caa4c55f09401609dac11f044ad7226235185f9deb332c2914a1e343ce844cb888c93d
-
SSDEEP
1536:Gz8JBv842NBTsIhTNnelEoXHQeDLjPwo3cf7R4dZzMAJrt/+YDuFAvDIqOezp7dh:fvXmSlr5LEosf7RkZzRtpqFAjVn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 411285df6e136317e7e8dc65f8cacc2f_JaffaCakes118
Files
-
411285df6e136317e7e8dc65f8cacc2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
927e62e22dd87f89f93baac1450ec353
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
GetProcAddress
LoadLibraryA
GetCurrentDirectoryA
user32
TranslateMessage
DispatchMessageA
GetMessageA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ