Static task
static1
Behavioral task
behavioral1
Sample
8bbf993f2eee2af1c196bb8bd91707a2_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8bbf993f2eee2af1c196bb8bd91707a2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8bbf993f2eee2af1c196bb8bd91707a2_JaffaCakes118
-
Size
126KB
-
MD5
8bbf993f2eee2af1c196bb8bd91707a2
-
SHA1
36f81a1b65512dd3eb48798d8f040db92a10b413
-
SHA256
4f569a4db8da5e6b7181afdb351cef5419e74666ca9d0138c955cc18485d9a3a
-
SHA512
1e50b2506a5dcf28b98072868e8acc3ec61990eb5254e091d58bba229c8e2e771e537065d439ffd39665812a9b0dadceb4def73a652dbc9e4b6826bc802848d7
-
SSDEEP
3072:4gxDAeSJ/7bAvS7eDmBcMHDHGTPzagXF3xPISqs/58My+:dtvStb77eucgLGTraitNLjV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bbf993f2eee2af1c196bb8bd91707a2_JaffaCakes118
Files
-
8bbf993f2eee2af1c196bb8bd91707a2_JaffaCakes118.exe windows:4 windows x86 arch:x86
39993322c42e2eddb5f1fc4dffa12327
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetTickCount
user32
GetWindowLongA
UpdateWindow
Sections
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 119KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ