Static task
static1
Behavioral task
behavioral1
Sample
d47bf4985480ea6f137b7361401c6c2c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d47bf4985480ea6f137b7361401c6c2c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d47bf4985480ea6f137b7361401c6c2c_JaffaCakes118
-
Size
38KB
-
MD5
d47bf4985480ea6f137b7361401c6c2c
-
SHA1
c819054d16bd3793290b866d1f557b73377d58d3
-
SHA256
8cbecb0fb408e4477c2c75ffbc363f6c7ccc018231d4f6d0ef6b85a8f6c3f824
-
SHA512
30f0a495d9018b2e9d25f60a064029f0a45a8b0c8f03f591eae3f9b67d1dec270ac8ddf75cc8f79ec383fbe4a30285519cba406445599ecaa925ed57e48d033b
-
SSDEEP
768:kFb4itgMfIQGvNcfgkyam9j5d+hH7FiNK:C4KgObfgkyaVi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d47bf4985480ea6f137b7361401c6c2c_JaffaCakes118
Files
-
d47bf4985480ea6f137b7361401c6c2c_JaffaCakes118.exe windows:5 windows x86 arch:x86
72385a557a38f80f59b692b31555af3e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetLastError
GetProcAddress
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 556B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 454B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ