Static task
static1
Behavioral task
behavioral1
Sample
c17d219595eb029936b3bc57769e3790_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c17d219595eb029936b3bc57769e3790_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c17d219595eb029936b3bc57769e3790_JaffaCakes118
-
Size
306KB
-
MD5
c17d219595eb029936b3bc57769e3790
-
SHA1
a4b59429f7899256681066246fd570874089a672
-
SHA256
4732eade580dc0652e58ca5fdc73776e0875952bb71696e71087780b80176ac5
-
SHA512
ac9a5c61cecc85aafec6cab66ba8071488c1c77359b4761595d681388d852a7a50c15e033f334e6b1ece95f498f238bc846391493fb44930603d2cd18fb32c09
-
SSDEEP
6144:HW59WHtVoAB3YgQ4FQdqI5RDBwvuYrkCOAzgvhA:HQGcAtYgQ4FOVAuU8vhA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c17d219595eb029936b3bc57769e3790_JaffaCakes118
Files
-
c17d219595eb029936b3bc57769e3790_JaffaCakes118.exe windows:5 windows x86 arch:x86
2fdc2d70845aa795418b000185c90b7c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceW
GetSystemTime
SizeofResource
ExitProcess
user32
GetDC
CreateDialogParamW
gdi32
GetDeviceCaps
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 303KB - Virtual size: 303KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ