Static task
static1
Behavioral task
behavioral1
Sample
f53845b7259bdf99b48b864a932e92a1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f53845b7259bdf99b48b864a932e92a1_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
f53845b7259bdf99b48b864a932e92a1_JaffaCakes118
-
Size
82KB
-
MD5
f53845b7259bdf99b48b864a932e92a1
-
SHA1
7d1007a5e0cc0eb0ffd39d8e683e07a7050d3d4f
-
SHA256
9fedb44b744fd2fbf89c0d4516f48da2cc2c06135106cc194cfcb965d17f08af
-
SHA512
3b4ecd09fdb651a351a66fd05c4bc3fac33043916941593ee9e3294f56146683bd08bbbee7e174e6d3a83d5215653053dccc562b0fe8b367e14583a3dd9be98a
-
SSDEEP
1536:8v0LhupZMLBaJF4jfsi/riZM+r++eXibI8kqJHu7fEy7mH+wCc:8muHMQP4j0OuZXi+Q/qID7pwt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f53845b7259bdf99b48b864a932e92a1_JaffaCakes118
Files
-
f53845b7259bdf99b48b864a932e92a1_JaffaCakes118.exe windows:5 windows x86 arch:x86
f41d0a33b35495e27d8813ba1d24ec8b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ExitProcess
msdxm.ocx
RunDllW
Sections
.text Size: 4KB - Virtual size: 304B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE