Static task
static1
Behavioral task
behavioral1
Sample
9fdb87b2a458b0684646c951e89798a8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9fdb87b2a458b0684646c951e89798a8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9fdb87b2a458b0684646c951e89798a8_JaffaCakes118
-
Size
14KB
-
MD5
9fdb87b2a458b0684646c951e89798a8
-
SHA1
b188b76ef8fb70cef935656a93e4c0aedf75580d
-
SHA256
765d20871a761b9b9d5a2c13ba6c9eaa710023fb914b28b560c01d2ee2777834
-
SHA512
2e0c25173ef97b77621e3065db342a5c4e9005cf7b29570edd8bf95dd6140dadbfe06b7124af784961ae382944651af5b5a2c90cc265aca45992ba9db6ab80d1
-
SSDEEP
192:U4XzmrEmjugdruyF6csTQKsXxTPs2LsoQu2PCQi+YUeW+dwNVU2XmJby9S:lXz83jugd8QLBzs2L72PCQi6tPyJg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9fdb87b2a458b0684646c951e89798a8_JaffaCakes118
Files
-
9fdb87b2a458b0684646c951e89798a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
2b29f61ac11407f698fdb1afbfd8012d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
GetServiceKeyNameA
AbortSystemShutdownW
kernel32
ResumeThread
UnlockFile
user32
CreateMenu
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE