Static task
static1
Behavioral task
behavioral1
Sample
dbca118e7117c83c47212e1d330c8c2a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dbca118e7117c83c47212e1d330c8c2a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dbca118e7117c83c47212e1d330c8c2a_JaffaCakes118
-
Size
29KB
-
MD5
dbca118e7117c83c47212e1d330c8c2a
-
SHA1
8f1759244f3938bfec195e1441be0df97c9ece48
-
SHA256
23dd7803b3754518c7592b12382c56b9b6d38983f142ed20e54cd07bbe0b422d
-
SHA512
877dc55adc16aebe864df33b13607c94a443385974f2a4b554ac7cb76252ebdaef0b72f9aa3f71e5a470540f5524a08adbe083a00f47b3a994c6a1af2488e0a4
-
SSDEEP
768:w33PbMa2swXLWntUlHmMWEGrQacNsvu1yxak:Ifoa2swbPlGvbcNt4x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbca118e7117c83c47212e1d330c8c2a_JaffaCakes118
Files
-
dbca118e7117c83c47212e1d330c8c2a_JaffaCakes118.exe windows:4 windows x86 arch:x86
4b12e0d406109217af8e8a830f65e157
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
ExitProcess
GetCommandLineA
CloseHandle
Sections
.text Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE