Static task
static1
Behavioral task
behavioral1
Sample
a982a1ff9a98233c760e251d6be0c821_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a982a1ff9a98233c760e251d6be0c821_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a982a1ff9a98233c760e251d6be0c821_JaffaCakes118
-
Size
116KB
-
MD5
a982a1ff9a98233c760e251d6be0c821
-
SHA1
ab1be9c9defc647cd0d5966ec45d99ac673a9142
-
SHA256
1107ee58bf36e71c2e2fe432b9b82311b4d26bbd8d4c640d7d3919e7fa519171
-
SHA512
4825ac63b9f14dc29dec3c991d6098b349fad2e628de966c8c0aa0cd8deb691653ba3868686bd60363ef5b116400a6d41dfc12d195915ad50f5e262390d351ba
-
SSDEEP
3072:T3C1mhyWewnQEAgkkZ1TeygGtA8hMIxLS/SpHlQK+:T3C8kHwnQBgk2SyTA8h/GSZl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a982a1ff9a98233c760e251d6be0c821_JaffaCakes118
Files
-
a982a1ff9a98233c760e251d6be0c821_JaffaCakes118.exe windows:4 windows x86 arch:x86
909a5941a50e53da18f244695ec0e545
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetTickCount
user32
GetClientRect
SetCursor
ReleaseDC
GetDC
Sections
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 110KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ