Static task
static1
Behavioral task
behavioral1
Sample
afc9d6e2f1644c370956b860d2fc0576_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
afc9d6e2f1644c370956b860d2fc0576_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
afc9d6e2f1644c370956b860d2fc0576_JaffaCakes118
-
Size
111KB
-
MD5
afc9d6e2f1644c370956b860d2fc0576
-
SHA1
707576c1aaf9e1613f81869ddb9a9db0d8f47790
-
SHA256
8646e8538b86408469822fb6b4bdc9cfc659df7a2024e0fc014ffff87ba30e44
-
SHA512
7dcd716e19b010a9c6dc31c15ddb56a98366fa86787d3200ac466317e0f5a40f87b294eb6b26652d9d38d09958001d7dc72501f0935b18d071f241a9ca3350da
-
SSDEEP
1536:v6N3VjCtNXrzEjl1k1G5NYZd1GzeXziE/+M/MpwSI/6ew5fm:gQNbojl1k1G5NIdvXDzSNeef
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource afc9d6e2f1644c370956b860d2fc0576_JaffaCakes118
Files
-
afc9d6e2f1644c370956b860d2fc0576_JaffaCakes118.exe windows:5 windows x86 arch:x86
c7eea809264525ef7fc16c37df6ee3cb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetModuleHandleW
VirtualFree
Sleep
ExitProcess
user32
GetMessagePos
winmm
timeSetEvent
comctl32
InitCommonControls
Sections
.text Size: 512B - Virtual size: 212B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE