Static task
static1
Behavioral task
behavioral1
Sample
ff5f84139ba0240d6af88e5f73deb11e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff5f84139ba0240d6af88e5f73deb11e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ff5f84139ba0240d6af88e5f73deb11e_JaffaCakes118
-
Size
454KB
-
MD5
ff5f84139ba0240d6af88e5f73deb11e
-
SHA1
2dab33d5a789b4182320739cd76c4a8d7312dc66
-
SHA256
c608ef7414c39584e475defa9d0543cac1b659934b89817267ed27631e8ee62a
-
SHA512
e0bf2e579678c4cae163845726f21d6301fae5aeec21308aea45020ea8d03b1eb31b90d2984bd245ffd71830ff2c5176260804935b1e32909eecac3687f0682f
-
SSDEEP
12288:g0QTCzjwjXjQ182yd/odc4u60LD2hBzcdcSjwx6QS:LQ4oE18Hd/mrx0eF8QS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff5f84139ba0240d6af88e5f73deb11e_JaffaCakes118
Files
-
ff5f84139ba0240d6af88e5f73deb11e_JaffaCakes118.exe windows:5 windows x86 arch:x86
22deaa3e5166e3019a02358581c9a9ee
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lopen
ExitProcess
user32
MessageBoxA
shell32
ShellExecuteA
Sections
Size: - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 394KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svkp Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
linghun Size: 113B - Virtual size: 113B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
linghun Size: 17B - Virtual size: 17B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE