Static task
static1
Behavioral task
behavioral1
Sample
d42787ee5f8dcc5619037f149dbbbfd8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d42787ee5f8dcc5619037f149dbbbfd8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d42787ee5f8dcc5619037f149dbbbfd8_JaffaCakes118
-
Size
22KB
-
MD5
d42787ee5f8dcc5619037f149dbbbfd8
-
SHA1
5a9951e0f124fc58c2404641bcd368e7a65b0b49
-
SHA256
62b522aba1a18b05180e6b8a14173a6e9ef2e72f4ee3fcfbbab0882809c52dd2
-
SHA512
647cb7990d892f27d4f9952d9d5eab5bfcb3dc671d1601ef9f2b05760eb2e6de7e49175f3b0049d7101bd0cfd776ad4b3e34706f9d81668bf8843839975934ba
-
SSDEEP
384:OO5ZoRJIG/eBKZMzo1W3lQQyWrF/usKXFMUEF1t0863tfgskyqmQJJcoktZ:D5ZSJz28ZMzd3lQQykFuX6Uc0ltFk758
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d42787ee5f8dcc5619037f149dbbbfd8_JaffaCakes118
Files
-
d42787ee5f8dcc5619037f149dbbbfd8_JaffaCakes118.exe windows:4 windows x86 arch:x86
3a2f0a00494382fbbd510d7cb8c4000b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAEventSelect
kernel32
VirtualQueryEx
user32
GetInputState
Sections
.text Size: 1024B - Virtual size: 878B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 38B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ