Static task
static1
Behavioral task
behavioral1
Sample
8755f72ab5881c02f007f4d830de88a0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8755f72ab5881c02f007f4d830de88a0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8755f72ab5881c02f007f4d830de88a0_JaffaCakes118
-
Size
63KB
-
MD5
8755f72ab5881c02f007f4d830de88a0
-
SHA1
9f2f43018a0578ba5149183e8889f53ebb88d0b1
-
SHA256
c4b4886a14e0fd912f4e9f812c6b5e43577725dba8b1b252a0ea23deb73b9e4d
-
SHA512
9faaa684fec58d1db25e3646bb4c2b93369a3c9ba08114690c0d1fa55be364480b82746a7f9d242fa0b2815c41f9735c9bb385f03133885b9c94bc15c7687942
-
SSDEEP
1536:lxMQN3CtZ6M8x5OpG33r0twwAuyKwF9F6zc7Ah7HJmNU+Ux2:lxVgZ6/x2234tAd6FFp7+T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8755f72ab5881c02f007f4d830de88a0_JaffaCakes118
Files
-
8755f72ab5881c02f007f4d830de88a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
bfe4e6ed0e3c636526e9fa3d3d61fba8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
CommConfigDialogW
ReleaseSemaphore
SetConsoleTitleW
SetDefaultCommConfigA
ValidateLocale
GetCPInfo
GetConsoleKeyboardLayoutNameA
OpenEventW
CreateSemaphoreA
FindActCtxSectionStringW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 49KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE