Static task
static1
Behavioral task
behavioral1
Sample
f0d10e9b152a60062302783d24274455_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f0d10e9b152a60062302783d24274455_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f0d10e9b152a60062302783d24274455_JaffaCakes118
-
Size
354KB
-
MD5
f0d10e9b152a60062302783d24274455
-
SHA1
fa676c886e13c9ca6d174f45985695c8fb45482b
-
SHA256
32d7965bace6ca7c873ac020038a1d1e4ebc55cdc9e1c6ae9ec3b3cc7a8f76f3
-
SHA512
1a2bca41f57529ed1e5b91b5f697e5d30c9a739e7bf53fe8840a89dac6ae1835debb8682dea9ee140574e8354801d28457d8ff202a79b53e79f2e64cd6f0a837
-
SSDEEP
6144:2guGxS4cGOM1Z75XNSUCRYSmwHfmVMB3ECoHxLfRSWlCeAXIKNmMaxwakeY4:2gun4TZ7KUCGLOfmqFvs9fE5IFnxwatf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0d10e9b152a60062302783d24274455_JaffaCakes118
Files
-
f0d10e9b152a60062302783d24274455_JaffaCakes118.exe windows:5 windows x86 arch:x86
aa66bfd1f945caa25bc6c954ffe16172
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
FlashWindow
MessageBeep
Sections
.text Size: 81KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 255KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE