Static task
static1
Behavioral task
behavioral1
Sample
d28a3d1c291aa7a5bfde08eb86c50e5b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d28a3d1c291aa7a5bfde08eb86c50e5b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d28a3d1c291aa7a5bfde08eb86c50e5b_JaffaCakes118
-
Size
9KB
-
MD5
d28a3d1c291aa7a5bfde08eb86c50e5b
-
SHA1
4a8f9d1859cfee28f3966bd655e4351f9f502446
-
SHA256
3266d9e36baa518141d913d18766c835fd79d538c0330c657e78c25b72c1a1f2
-
SHA512
2c7312fe56ac770a20a93108e3a9239d9e56f84418aa6044632a18a314db9ef42e1bf85cb757876fea7e38ff84f2049fa75a2371718205057e68d90fec079a43
-
SSDEEP
192:mHLJEWKcSBfn84qAaCPsq5fvWHbjRuS090u4j:MjKcUlqEPsq53cbjgSjuw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d28a3d1c291aa7a5bfde08eb86c50e5b_JaffaCakes118
Files
-
d28a3d1c291aa7a5bfde08eb86c50e5b_JaffaCakes118.exe windows:4 windows x86 arch:x86
f33c5fd920f738145c4de9bc16998b25
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExA
DefWindowProcA
BeginPaint
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 136B - Virtual size: 134B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 152B - Virtual size: 188B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ