Static task
static1
Behavioral task
behavioral1
Sample
b280adfef52cc0f02a98225ae5bfe759_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b280adfef52cc0f02a98225ae5bfe759_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b280adfef52cc0f02a98225ae5bfe759_JaffaCakes118
-
Size
52KB
-
MD5
b280adfef52cc0f02a98225ae5bfe759
-
SHA1
4114e77fb188c1a1d11ce86739cae955a54f8c48
-
SHA256
0ef16704ca9fec79ffcf5975432571ae1d324eda5a6197935b24ff9789ab9cc0
-
SHA512
c83073b8eb5037fb805f320f8edf9869f74c3ce774baa989b7847676ea53df622be9c4f7390ea73962b827902a71c2baae624b501f07b2522a36f18b2e5bba32
-
SSDEEP
768:tA8wMAtboY40bc5fi/LgWm7ZHLhSZnWD58EDIoDDDKwMiu4kaDiA0+M3sKVR+:tA8wM23MAix0Z+JDpzu4kaDRZMu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b280adfef52cc0f02a98225ae5bfe759_JaffaCakes118
Files
-
b280adfef52cc0f02a98225ae5bfe759_JaffaCakes118.exe windows:4 windows x86 arch:x86
4c71388e384fa8d26ecec1f0da9a7e67
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLDownloadToCacheFileA
ReleaseBindInfo
CompareSecurityIds
DllRegisterServerEx
ntdll
LdrShutdownThread
ZwSetInformationProcess
KiUserCallbackDispatcher
LdrLockLoaderLock
Sections
.text Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE