Static task
static1
Behavioral task
behavioral1
Sample
a639929c03f30a0778e5ed8f05a82f36_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a639929c03f30a0778e5ed8f05a82f36_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a639929c03f30a0778e5ed8f05a82f36_JaffaCakes118
-
Size
44KB
-
MD5
a639929c03f30a0778e5ed8f05a82f36
-
SHA1
88699bf9d89af806f57ed84df6670e435186c3a8
-
SHA256
129180edbbb349dcf64831842d3c0434571229a8c100098e65532000160b9c15
-
SHA512
d28dc9b3a4def70ca91311a1899ee4afeda95246c7b4ff7d33028814b645a8c236db654ff8f4b6c2961a834b41fa872f030ecf0610f576e4b1a3df12bf99dca1
-
SSDEEP
768:i9tDRIpxGNU1wKfCuC3VvnSG497Kx7a0+FFWsgUEQiPXt+hR:irRIpcirCuC3Zr497Oar7DgX4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a639929c03f30a0778e5ed8f05a82f36_JaffaCakes118
Files
-
a639929c03f30a0778e5ed8f05a82f36_JaffaCakes118.exe windows:5 windows x86 arch:x86
c47ca85ccfa7729d44b8b4c01309d5f8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetThreadDesktop
PeekMessageW
kernel32
GetTempPathW
Sections
.bgz Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xgx Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.khsrkd Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ