Static task
static1
Behavioral task
behavioral1
Sample
9431ee1fe122767393632924cb39a085_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
9431ee1fe122767393632924cb39a085_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9431ee1fe122767393632924cb39a085_JaffaCakes118
-
Size
22KB
-
MD5
9431ee1fe122767393632924cb39a085
-
SHA1
a36d1eb2bc43845652e024501cbf5d3b6ae48389
-
SHA256
f5bbe3e3f40a0562ab6b8437d0fc22bf5310502c09374dc91a7b09a0b29ee1bd
-
SHA512
34abb520640abef9eac5b8e61e204f5d9245315e094edb3e7111b7966eedd6ffc99243c144183f1ee4fb853a4ace460ef1879511ae9cf5ec36bbf82db004ce9e
-
SSDEEP
384:tURwkloyLYdS6BzXTc/3Mp7lHHt5bkCGLrgaQS8+px+FUaud6AEWv6oqFf9v:KRw8obdfpXTa3Gnt54C00Sjpx+FUa8g9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9431ee1fe122767393632924cb39a085_JaffaCakes118
Files
-
9431ee1fe122767393632924cb39a085_JaffaCakes118.exe windows:4 windows x86 arch:x86
39c87c5cea161696eacaa4d7cdc6a324
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
select
kernel32
GetMailslotInfo
user32
MapVirtualKeyExW
gdi32
ExtTextOutW
advapi32
RegCreateKeyW
shell32
ShellAboutW
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ