Static task
static1
Behavioral task
behavioral1
Sample
d71129f73d5a88c50f24981df64b93fe_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d71129f73d5a88c50f24981df64b93fe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d71129f73d5a88c50f24981df64b93fe_JaffaCakes118
-
Size
1.0MB
-
MD5
d71129f73d5a88c50f24981df64b93fe
-
SHA1
8787510d7533af8959aa8472edd505f3dcd335ea
-
SHA256
39138d1c9cbd0e6bbade9600811678308f491056a9ff0b1da220848f63977d65
-
SHA512
c53efba68a010917f0f434c57fcd4c5d2f2a958b6cd8c91b4346f8bff86e84d8bc9e2c8f0541cd72f93110568caa41b947fd1dc3fc2fa1a2417911d7a835848a
-
SSDEEP
24576:xRmVLR1PiFaSm7whxYfO5kyhFX1qekwvE8pK1tu/ohZbGlD:xRcbjrEC5yhF3kws6ATM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d71129f73d5a88c50f24981df64b93fe_JaffaCakes118
Files
-
d71129f73d5a88c50f24981df64b93fe_JaffaCakes118.exe windows:4 windows x86 arch:x86
20e9b842918c90b6230fe45ea0dd4d1f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
Imports
winmm
waveOutReset
waveOutOpen
waveOutOpen
mmioDescend
mmioClose
mmioRead
mmioAscend
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 578B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�reloc Size: 36KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ