Static task
static1
Behavioral task
behavioral1
Sample
b8d24a794405c5bedb2c0fdb26504af7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b8d24a794405c5bedb2c0fdb26504af7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b8d24a794405c5bedb2c0fdb26504af7_JaffaCakes118
-
Size
111KB
-
MD5
b8d24a794405c5bedb2c0fdb26504af7
-
SHA1
8795b8aba311e8c768a989249bf723fca9a273d0
-
SHA256
7291e8b0904637373c60659edba8eb1bb67e409aeb6493a436813f1c88e5db51
-
SHA512
106671bca8a5d88882b3e8cd1e29e0f79051a18690134ddff3a8e5ab9b9572102fb660a68c43f6378988f7265de1b839b07dfc390489ade6f86cca3a7bc04c60
-
SSDEEP
3072:qPeNVf+selCWy0GSyXgJH3KKHoXKLQeG:qPeWsuCWoydHo6LQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8d24a794405c5bedb2c0fdb26504af7_JaffaCakes118
Files
-
b8d24a794405c5bedb2c0fdb26504af7_JaffaCakes118.exe windows:5 windows x86 arch:x86
44626fae7155013f6e56a8d09752d250
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetStartupInfoA
Sections
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ