Static task
static1
Behavioral task
behavioral1
Sample
e1a628475fec34b18ab3f3769f487b9c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1a628475fec34b18ab3f3769f487b9c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1a628475fec34b18ab3f3769f487b9c_JaffaCakes118
-
Size
356KB
-
MD5
e1a628475fec34b18ab3f3769f487b9c
-
SHA1
b0e8cbdc38564917f28cf4895c4d1e948d3553b8
-
SHA256
3b645d59d42a10fde98ab93309387c756ba2d1c3805ce384939ff8aebc9f9f14
-
SHA512
1481b5afa28c3d799dbaeb5f6ffef223c143609576028720cd5e51b866ddb733077ab748da295779931057704edf362a090b38da82c3e6b7d74ecc69f5a301ca
-
SSDEEP
6144:vEkjygVtJrMwBRPVcEaw+XxtObv6vQp9TwTIi0VFJ4A3GIjcBRFb9ZVll8X:vj77JrMwHPGRVBO99To50XJtDgl8X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1a628475fec34b18ab3f3769f487b9c_JaffaCakes118
Files
-
e1a628475fec34b18ab3f3769f487b9c_JaffaCakes118.exe windows:5 windows x86 arch:x86
91dda5149dd4554577801f3e7a641bd6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterHotKey
SetFocus
Sections
.text Size: 83KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE