Static task
static1
Behavioral task
behavioral1
Sample
c1a0c90edf3eb53cc436e34a1ca9512d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c1a0c90edf3eb53cc436e34a1ca9512d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c1a0c90edf3eb53cc436e34a1ca9512d_JaffaCakes118
-
Size
23KB
-
MD5
c1a0c90edf3eb53cc436e34a1ca9512d
-
SHA1
fe18042c94faa0b37f596c2894ad5a0db64b8bf8
-
SHA256
80c0eb7977457c5569980a2f99ba8d1ec4dcd77bb42b8f059305e6047503418b
-
SHA512
71048543b1a720f0d8edc23bb21f281d2e53521d3eab133c9050fee9eb7826d91c8bb2d4cd5d5eb4cd8327d8e32d91566e436f13c39a74c5e59caaaa0dd1426a
-
SSDEEP
384:s/jeK2ugFirE2RTwnpXtp+bSV5WNHWR9+EMQOr:w/SiJTwbYlY9lyr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1a0c90edf3eb53cc436e34a1ca9512d_JaffaCakes118
Files
-
c1a0c90edf3eb53cc436e34a1ca9512d_JaffaCakes118.exe windows:5 windows x86 arch:x86
11ccb4e69b1279ecabec8d9d7ccbf149
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
msvcrt
memcpy
memset
user32
CreateWindowExA
LoadIconA
LoadCursorA
RegisterClassExA
gdi32
GetStockObject
advapi32
RegOpenKeyExA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ