?LowLevelMouseProc@@YGJHIJ@Z
Static task
static1
Behavioral task
behavioral1
Sample
8ae560cf5d8025abdfe2b69cf0957ef6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8ae560cf5d8025abdfe2b69cf0957ef6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8ae560cf5d8025abdfe2b69cf0957ef6_JaffaCakes118
-
Size
252KB
-
MD5
8ae560cf5d8025abdfe2b69cf0957ef6
-
SHA1
0a70b4095b35466d8f2cb879f704d519f9c13085
-
SHA256
f048b0764789f6a8920b5121cd485bbf588d399913f6a9c472daa834cd01a32f
-
SHA512
62968a8b5d1b2fca7f40fe8cc836507c71e43102c65e849063e998ceb58b560592ee21d042f9cc2d4de3f44f6a25a89faf4f6d94da02229d031f69ea7bdfaf9f
-
SSDEEP
3072:emfZm3QHGTYs72Ml9y82PRtZpWkW7sFWVg9NWFT+iTI4We7l3W41sBvM7++1CaVd:ecZm3KVsaEp6RtHLEiWSXAI4ZQaVuX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ae560cf5d8025abdfe2b69cf0957ef6_JaffaCakes118
Files
-
8ae560cf5d8025abdfe2b69cf0957ef6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: 188KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ