Static task
static1
Behavioral task
behavioral1
Sample
8bf834e2c006f88ed67e1da3b5487ddc_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8bf834e2c006f88ed67e1da3b5487ddc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8bf834e2c006f88ed67e1da3b5487ddc_JaffaCakes118
-
Size
45KB
-
MD5
8bf834e2c006f88ed67e1da3b5487ddc
-
SHA1
d71160c680eabbaa1142b3d514241852b065383c
-
SHA256
0c2da1d2ae0005d949ccf4e373aa793d1d23333982e8c5fb7f9f49f87458708d
-
SHA512
3c3df032c25bd88b3465f7c17e5e078e411948377e2fdb16bf01d011fbc142b77f7da68f7686d433f6a58f9c788fa8193934eee00a7b62ffabc7e9a16958d38c
-
SSDEEP
768:sLq0cU5cfGgBkv071Bu9U/+sVvtoPMo1e42:x0P5cf80hBilsZOPL172
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bf834e2c006f88ed67e1da3b5487ddc_JaffaCakes118
Files
-
8bf834e2c006f88ed67e1da3b5487ddc_JaffaCakes118.exe windows:5 windows x86 arch:x86
882a93eaa965165392b7c99c7b8d148d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryW
LoadLibraryA
GetModuleHandleW
GetModuleHandleA
CreateFileW
lstrcatW
GetWindowsDirectoryW
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zz Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zz1 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zz2 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 470B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ