Static task
static1
Behavioral task
behavioral1
Sample
89c224ff036be63b647f4f4e4c9e2a48_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
89c224ff036be63b647f4f4e4c9e2a48_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
89c224ff036be63b647f4f4e4c9e2a48_JaffaCakes118
-
Size
111KB
-
MD5
89c224ff036be63b647f4f4e4c9e2a48
-
SHA1
ab7e667b07a94da319860f377fabef0cfd3914b3
-
SHA256
b0b9ef6cff06e3444b0570a6ae98c1657071ae64d0db98566c7aa1c3f8fdaa90
-
SHA512
7d371acaa50ae17158ad3755c1bd8f69c4869c926310254559dc8aca7c959f8a99cf7a16768dd123efc1bb75a935e41dac64ddccfd6ef0df0a90ee58e6df1356
-
SSDEEP
1536:6wBKXzq8oIN57o4WiVUzUzxKK0PEDHD5FvJh+8G2s37mFuQBPQF1VcOFfYgBvvKL:6wBKXudXIKZAjzhh+83mIDBPk8OVveD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89c224ff036be63b647f4f4e4c9e2a48_JaffaCakes118
Files
-
89c224ff036be63b647f4f4e4c9e2a48_JaffaCakes118.exe windows:4 windows x86 arch:x86
214da230d998faccb31f84856fdd22ae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
GetProcAddress
LoadLibraryA
GetTickCount
GetCurrentDirectoryA
user32
DispatchMessageA
TranslateMessage
GetMessageA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ