Static task
static1
Behavioral task
behavioral1
Sample
d2ee6a8b14b8ce15c074a239a16ea5ea_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d2ee6a8b14b8ce15c074a239a16ea5ea_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2ee6a8b14b8ce15c074a239a16ea5ea_JaffaCakes118
-
Size
116KB
-
MD5
d2ee6a8b14b8ce15c074a239a16ea5ea
-
SHA1
76599a880799db8c1e0b85a1f5f7a2c9e9f0b3dc
-
SHA256
c0d2229fd309f97916d6c301bcb3f649bbe4e5e91fb4284b0da680fe43fc6b1b
-
SHA512
640eb04f4031351fac681f3b9f8652efde139ef9879cf29730654b2a7af50b2029e53e7f23dac04e2c2371f6816eeeb9b8a1387285f05020654a84539da61355
-
SSDEEP
3072:lUhkV7qHe1A5N6crj68pfmUCmlr78nymGspH:lUiFq+1Azn68p1HZjmj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2ee6a8b14b8ce15c074a239a16ea5ea_JaffaCakes118
Files
-
d2ee6a8b14b8ce15c074a239a16ea5ea_JaffaCakes118.exe windows:5 windows x86 arch:x86
87909b7a0943245c20b685ce51ad2b76
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetDriveTypeA
VirtualFree
Sleep
ExitProcess
user32
GetDesktopWindow
GetMessagePos
Sections
.text Size: 512B - Virtual size: 212B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Cxaxe. W Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Svequsov Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Vqlyna V Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 261B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ