Static task
static1
Behavioral task
behavioral1
Sample
bbdbecfa5ea156c59a1a05868697d930_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bbdbecfa5ea156c59a1a05868697d930_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bbdbecfa5ea156c59a1a05868697d930_JaffaCakes118
-
Size
30KB
-
MD5
bbdbecfa5ea156c59a1a05868697d930
-
SHA1
7eb6a72fe8f0acb4452371e6d64b9ec9d7770582
-
SHA256
0178d26463ef0fd8dfd9434546e19f4dc5104ac442e2e454c3b0db975e0b63ea
-
SHA512
6a1b507f36268f59a4f8157a871a6a455b2af2966a2d5358fe4458c09e3eea1b6fbff9e28f7335a97510b960f12fa6fb5030b7c8bc2ae076d8153130f6d466e7
-
SSDEEP
768:/dkK1vMYmld6TUMRGk2A33aOoGp6Yi6tE:W0Oj67RGk2I3N8IE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbdbecfa5ea156c59a1a05868697d930_JaffaCakes118
Files
-
bbdbecfa5ea156c59a1a05868697d930_JaffaCakes118.exe windows:4 windows x86 arch:x86
f84ff1fec7866e50d95c62e55aa5da77
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
Sleep
ConnectNamedPipe
user32
SetTimer
GetFocus
CharNextA
PostQuitMessage
gdi32
Escape
Sections
.text Size: 1024B - Virtual size: 966B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ