Static task
static1
Behavioral task
behavioral1
Sample
87b698bfb8540cef8a40ed2a217c2afa_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
87b698bfb8540cef8a40ed2a217c2afa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
87b698bfb8540cef8a40ed2a217c2afa_JaffaCakes118
-
Size
36KB
-
MD5
87b698bfb8540cef8a40ed2a217c2afa
-
SHA1
78ebb984faec86b86f7a2d928b96a1b5e3b85170
-
SHA256
11b229ca2caf2a6d372ddddaaeff00259333a32c60ea91eb5a63fa4c781707a6
-
SHA512
ed4e5b99bc76405367a6b1dee7c9c90c29f365989d5631037b2903954100daaf676d73c74a4bb3de0722af379af6f296ed001e4691c9efb7b9f061569bdf04f5
-
SSDEEP
384:X/nykMtWjbWy2G67EsBj8N49ebBNZgkcm8+M2c0htvB222222iddF0mi9hC:+2b6E8GtNZ7852vtu+H+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87b698bfb8540cef8a40ed2a217c2afa_JaffaCakes118
Files
-
87b698bfb8540cef8a40ed2a217c2afa_JaffaCakes118.exe windows:4 windows x86 arch:x86
648e74ed3df0de0f3fe2e40770d9346e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadIconA
LoadCursorA
GetMessageA
DispatchMessageA
DestroyWindow
DefWindowProcA
TranslateMessage
CreateWindowExA
kernel32
Sleep
RtlZeroMemory
GetTickCount
GetModuleHandleA
GetCommandLineA
ExitProcess
lstrcatA
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 458B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ