Static task
static1
Behavioral task
behavioral1
Sample
9552f4c51753541c2284bb2f8a509b40_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9552f4c51753541c2284bb2f8a509b40_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9552f4c51753541c2284bb2f8a509b40_JaffaCakes118
-
Size
34KB
-
MD5
9552f4c51753541c2284bb2f8a509b40
-
SHA1
d258710b4abbcd9e658f34d359bb1e1992b942ac
-
SHA256
d04c34e01744c0615479b061572df9a7ef56a98ccc9ac5c478f2316674a4cc5f
-
SHA512
320058d9f1cb09701c96cd05d435913f2a869b7762e58d07d918fa3baabd569c195faa1ef0af59e1ba04b7fd5f0b05d00bee74fc65beb0a6abef51d5109de202
-
SSDEEP
384:pitlbmFqtPpfgkYBbvezxUcuTvbx8ymK5Kp1WHOqPewHnb+vxvf0:p8bmSfvYJvezAvbx8y5015qTnCvx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9552f4c51753541c2284bb2f8a509b40_JaffaCakes118
Files
-
9552f4c51753541c2284bb2f8a509b40_JaffaCakes118.exe windows:3 windows x86 arch:x86
5a6bdc56ac03de69782519178ad70995
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
user32
GetWindowDC
gdi32
GdiFlush
GetBkColor
GetBkMode
Sections
.idata Size: 512B - Virtual size: 250B
IMAGE_SCN_MEM_READ
.code Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ