Static task
static1
Behavioral task
behavioral1
Sample
b97914bb41f3e9b7e1fc8a2ceed65cef_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b97914bb41f3e9b7e1fc8a2ceed65cef_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b97914bb41f3e9b7e1fc8a2ceed65cef_JaffaCakes118
-
Size
15KB
-
MD5
b97914bb41f3e9b7e1fc8a2ceed65cef
-
SHA1
2b047e14751bde354391e95d087f7a32611b4032
-
SHA256
7b0e2d4f52b5284b494cf8c97f0cfe023c3f1ed2c6ec9ef8b4e9773108800063
-
SHA512
5450392416fb8f792a7a3786b49db0196504eaad3ac85fe1e6c53be24d926fe24a816182073c95ba24a4c3ad1408dbacbdddd5447597776216b68b8cc638bd97
-
SSDEEP
384:q4kdix7/SwdWJz8gfcLdcfzKUUWPSKQJ:OiPfg0LKf1C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b97914bb41f3e9b7e1fc8a2ceed65cef_JaffaCakes118
Files
-
b97914bb41f3e9b7e1fc8a2ceed65cef_JaffaCakes118.exe windows:5 windows x86 arch:x86
b44a0943280fa0f7ecd4efa707020fe4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
LoadIconA
advapi32
RegOpenKeyW
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ