Static task
static1
Behavioral task
behavioral1
Sample
d9cb88a31bb390e7bc9567f218749e50_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d9cb88a31bb390e7bc9567f218749e50_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d9cb88a31bb390e7bc9567f218749e50_JaffaCakes118
-
Size
356KB
-
MD5
d9cb88a31bb390e7bc9567f218749e50
-
SHA1
a3bc55064206f6d0ee50958708a9e324ad0e44d9
-
SHA256
bc3f3c24bf7877923749164158ace21246e006699ab27c67ff7784e7d10ced54
-
SHA512
fd5411b1665fb1451ad83a73a39a5ce4956587496c08cd9e667bc95fec94b83894b31a1d8c21d24c0a103bcc53b9f99aeb885140b3c4668dec720c00d6af5ea2
-
SSDEEP
6144:f/Ppxskv5z8Ty0FrEj60wmsg/R04F4l+bxPTwmIv2d26+OxUC+s60Py8+3EoqWaP:f/Ptv5jUrEj64scR04F4l+bZwmIon+ZK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9cb88a31bb390e7bc9567f218749e50_JaffaCakes118
Files
-
d9cb88a31bb390e7bc9567f218749e50_JaffaCakes118.exe windows:5 windows x86 arch:x86
a93fb58c9ff8d561f2d7573e548a645c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UnloadKeyboardLayout
GetKeyState
Sections
.text Size: 83KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE