Static task
static1
Behavioral task
behavioral1
Sample
d233588bc92a9aee0dde0dcd79794aaa_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d233588bc92a9aee0dde0dcd79794aaa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d233588bc92a9aee0dde0dcd79794aaa_JaffaCakes118
-
Size
23KB
-
MD5
d233588bc92a9aee0dde0dcd79794aaa
-
SHA1
c58da3ec5888f89a8e7ec283d905f003c83fba31
-
SHA256
d21362c7e6d21fef87562cb9000b745e34a160c0aa2696422541ef1dad13c5dd
-
SHA512
0e36890350e1094b8cadd3c8dbf83812b6883fe994b1b991a8b7bce6e6b3b0eecf1605e58b41d9b9bfdb00919b32b8c5cd95c0c5adc8e7f4e74c9517e233e60f
-
SSDEEP
192:8CH/QebWdQb3YAoNfkEfV6w69LrLEjPx3rRu892a+kqR6BU+MT8ItN:8Xe90AoNfDSL/Ejlduxa+DcBS8+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d233588bc92a9aee0dde0dcd79794aaa_JaffaCakes118
Files
-
d233588bc92a9aee0dde0dcd79794aaa_JaffaCakes118.exe windows:4 windows x86 arch:x86
dd125274f1f3a15bb96109cac187612b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpy
user32
CheckMenuItem
GetMenu
Sections
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ