Static task
static1
Behavioral task
behavioral1
Sample
b320feb2cdd3f7338193dd54caee1c2a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b320feb2cdd3f7338193dd54caee1c2a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b320feb2cdd3f7338193dd54caee1c2a_JaffaCakes118
-
Size
40KB
-
MD5
b320feb2cdd3f7338193dd54caee1c2a
-
SHA1
5431e3247c7fea9fd1fcd76ff6cccd5a597962e4
-
SHA256
bc8e0c90d3e94ea0e109074e95f41cc9f005d3db27df1ee13226825cd230d618
-
SHA512
f24bb1c07bd1dcc959bf2e991cfc2f2cb055b9b30dcb39d5e7aafd9589c02e466952c0e938fdaac8d541794ac6f1637cf6f27a146f2c234e0d247c985d2a6486
-
SSDEEP
384:VKHLLxDKNcruDpz5U/l5rOCeQepBcdsGr4oz8zlbF127uRZXdrl89XE7BYbpvZ3w:VKHLLWDp5GKVQ7GGKzj0mXd4G+FAX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b320feb2cdd3f7338193dd54caee1c2a_JaffaCakes118
Files
-
b320feb2cdd3f7338193dd54caee1c2a_JaffaCakes118.exe windows:5 windows x86 arch:x86
b3a3d438cc337614c28109b5fc7574ac
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoW
LoadLibraryA
GetProcessHeap
GetModuleHandleA
GetProcAddress
advapi32
RegCloseKey
RegOpenKeyA
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wer1 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wer5 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wer8 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wer2 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wer7 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wer3 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wer4 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wer6 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 460B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ