Static task
static1
Behavioral task
behavioral1
Sample
d3c791f585806319a3abe56aa81b08a6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3c791f585806319a3abe56aa81b08a6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3c791f585806319a3abe56aa81b08a6_JaffaCakes118
-
Size
306KB
-
MD5
d3c791f585806319a3abe56aa81b08a6
-
SHA1
ec5d177d7d8900761a541e3a53d8eba42fb4ca0c
-
SHA256
84ae7f683e05c16708aaa1660f5b88fdda6fdca0a7e07355a752d5eb97d4ed2a
-
SHA512
a0b1fdb78ca3de9517f517c7455ca2f19ebd01a535d79844688df90e250028b43bb9fb1498dd1c633e3128eb5d6b0f997e68ac0a47645021d44fd9ab57d5a6da
-
SSDEEP
6144:HWtIo5fjEVuesdR/gm2AnSOyJYuUPnIc7hnSm5y+4g/pqAX8vhA:HROfjE8RdFg0nP6c7h3L0vhA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3c791f585806319a3abe56aa81b08a6_JaffaCakes118
Files
-
d3c791f585806319a3abe56aa81b08a6_JaffaCakes118.exe windows:5 windows x86 arch:x86
2fdc2d70845aa795418b000185c90b7c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceW
GetSystemTime
SizeofResource
ExitProcess
user32
GetDC
CreateDialogParamW
gdi32
GetDeviceCaps
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 303KB - Virtual size: 303KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ