Static task
static1
Behavioral task
behavioral1
Sample
b248a04636e1abd4eb523bc2e0ee78a1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b248a04636e1abd4eb523bc2e0ee78a1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b248a04636e1abd4eb523bc2e0ee78a1_JaffaCakes118
-
Size
22KB
-
MD5
b248a04636e1abd4eb523bc2e0ee78a1
-
SHA1
10ce563bf4298ef6bf0f1c38c428fbdd8ffd4074
-
SHA256
14f4462f8b3a196caa67c06aa111c72a5d70f93a35f55262dfbb47f5af0c9514
-
SHA512
3e6698df42a18d00b4e6267bc07c96d3d658bf9a758b19e566711104b04a859fdf785e7254ed81207a88829c82fd15ec358eb7446259e2f1c4c96597c31e3e0f
-
SSDEEP
384:7USwkl6OKjh0PR5ggCWbLJG9rz98OBT9ypBVKdG0SyxuIPDAY+dNS1PH1DFqap6t:gSw86M5FGVZ8OBTspBVKwUAGcdNKDFaV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b248a04636e1abd4eb523bc2e0ee78a1_JaffaCakes118
Files
-
b248a04636e1abd4eb523bc2e0ee78a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
39c87c5cea161696eacaa4d7cdc6a324
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
select
kernel32
GetMailslotInfo
user32
MapVirtualKeyExW
gdi32
ExtTextOutW
advapi32
RegCreateKeyW
shell32
ShellAboutW
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE