Static task
static1
Behavioral task
behavioral1
Sample
84e257573dfa5cdf65680625042be605_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
84e257573dfa5cdf65680625042be605_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
84e257573dfa5cdf65680625042be605_JaffaCakes118
-
Size
41KB
-
MD5
84e257573dfa5cdf65680625042be605
-
SHA1
cfce1186f0512589ce3987f2fbaa7dfe9e18ff50
-
SHA256
341e0468129f69547173746bd23b2274f49a8d7d40e3b3f4e5a225c6696501a8
-
SHA512
e00505193583a100895b047ccd62b6a90befc1c383c38d1ecc4536a4229cabaec8f201f32b3a95c5906cd3b760987092a6e1ae02f242b8a5805ba3129c99ba94
-
SSDEEP
768:hDLu4gJwnFPrbSn4nQ1NzJVSa93f+Q257Mk+XD4JjR8LUGMUdGAocclF4Camk66z:N571bSn42dLSa97ZfT4P8LUQ9ordeA+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84e257573dfa5cdf65680625042be605_JaffaCakes118
Files
-
84e257573dfa5cdf65680625042be605_JaffaCakes118.exe windows:5 windows x86 arch:x86
dfa1d8e4b32e8b39a38d3bae9917691d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetSystemInfo
user32
DestroyIcon
FlashWindow
EndDialog
Sections
.budal Size: 34KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hsz Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fin Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xgp Size: 1024B - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE