Static task
static1
Behavioral task
behavioral1
Sample
b506f9c26f2b6d7d28bb1a7675f035f9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b506f9c26f2b6d7d28bb1a7675f035f9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b506f9c26f2b6d7d28bb1a7675f035f9_JaffaCakes118
-
Size
37KB
-
MD5
b506f9c26f2b6d7d28bb1a7675f035f9
-
SHA1
d34a470c9eae431c2752141939875e57dced749e
-
SHA256
11ebfc5ff156380e1df9da3d054f4c02136da00d88b5949b835afb9a7df78b47
-
SHA512
d1e873063917a6bd03da46de5780c2806b390a1361e4dc3577ea8ba17c3328b75b50cd6702d76275d96d6cc6b2aa1e94fd866e504a59c2e63f71c8f9ac4ec1ad
-
SSDEEP
768:WzfPRraG8o8KjFoj19TCv1KyhBqTfvv/wpvrsKx8QxlZbt6v:WzfPRrX8VbuXqTfXmIKx8QVbUv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b506f9c26f2b6d7d28bb1a7675f035f9_JaffaCakes118
Files
-
b506f9c26f2b6d7d28bb1a7675f035f9_JaffaCakes118.exe windows:5 windows x86 arch:x86
fec81e7a40e5ac09b57dc17cbe79949f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
user32
LoadCursorA
LoadIconA
GetKeyNameTextA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ