Static task
static1
Behavioral task
behavioral1
Sample
b366b5b3c17f3ed56e61530ab5b9cf67_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b366b5b3c17f3ed56e61530ab5b9cf67_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b366b5b3c17f3ed56e61530ab5b9cf67_JaffaCakes118
-
Size
44KB
-
MD5
b366b5b3c17f3ed56e61530ab5b9cf67
-
SHA1
b18fc71d160b665cfb70b5cf357c5ef45bb28156
-
SHA256
1462a5603e41ff0b4e139617d055e5e65df4e37812fd1db7f5c08af757d6038d
-
SHA512
822383543a1cabae1727e2dedab2a6ba6df13493118ab39040dc72d062f5e822c787e97111ded319b0a1bb50b03a61fb5bb9aa784e73b1af2898704175d8341c
-
SSDEEP
768:10c+REOwqTSIT6ibIUbFUYln0WZ3TJWxygp7FZVxjDgN7nOH1gEog4BazpH:10d1SIuibIR23OFZVhUN7nOH1gEoxB0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b366b5b3c17f3ed56e61530ab5b9cf67_JaffaCakes118
Files
-
b366b5b3c17f3ed56e61530ab5b9cf67_JaffaCakes118.exe windows:5 windows x86 arch:x86
f59cc76afdf7f8c343f7a29c9dd2068e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ToUnicode
GetKeyboardState
kernel32
SetEvent
Sections
.dihwh Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.oxqhkr Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kxarmt Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ