Static task
static1
Behavioral task
behavioral1
Sample
d10b315cb8c8838adf79aa236d10afed_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d10b315cb8c8838adf79aa236d10afed_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d10b315cb8c8838adf79aa236d10afed_JaffaCakes118
-
Size
44KB
-
MD5
d10b315cb8c8838adf79aa236d10afed
-
SHA1
aa6e9b6b94500b828d362f8f0ab7c5313439fea1
-
SHA256
7715d37dc47b81b30a493e84b6775373f11b51112026f6c4d2a0e1d8f2f037e5
-
SHA512
c2f76440e0983f0056d8d741adce108455e7e4d8a6e63992e75b8db97ea78749276240116c84491090c5fbf2ebe75cfcdba794c55dfe6b5ad99d26e0d5ff9576
-
SSDEEP
768:I3je/QpMkR6SOtVgJaAn2FTcvj8X9HUQYEQIKFShz5mLgd7okzkeJx5T9kOFqOmI:cj7yM6fumhOEKFShqgPzkSlfFqOmo4q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d10b315cb8c8838adf79aa236d10afed_JaffaCakes118
Files
-
d10b315cb8c8838adf79aa236d10afed_JaffaCakes118.exe windows:5 windows x86 arch:x86
a71557480b54d86f267d7742c89fb610
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ToUnicode
SetProcessWindowStation
kernel32
InitializeCriticalSection
Sections
.elql Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qfwlir Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdcfwn Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ