Static task
static1
Behavioral task
behavioral1
Sample
fda1e8d80783c895a85d673a1d0372d3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fda1e8d80783c895a85d673a1d0372d3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fda1e8d80783c895a85d673a1d0372d3_JaffaCakes118
-
Size
22KB
-
MD5
fda1e8d80783c895a85d673a1d0372d3
-
SHA1
35fc9e95d45d1df2dcae271411cb7679f6ca63fe
-
SHA256
4e19350a04c8e20fa0da864ff520b42b57d85c502e5f47097e40235575f3d485
-
SHA512
5bbad3d6870404ba96c79bd430548e0593bca933981c0434f012dcb63fab45f6764c9c27ad482a4a6fff5d294bf45c86bc9506c9222b1aff01127323d078f8ef
-
SSDEEP
384:BEWUYFCaABsk3TOExaPwCxnhMCYn/b2DCAaj9yLpH7Id:2V33B/D3xaI8uF/UCAQALJ8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fda1e8d80783c895a85d673a1d0372d3_JaffaCakes118
Files
-
fda1e8d80783c895a85d673a1d0372d3_JaffaCakes118.exe .ps1 windows:4 windows x86 arch:x86 polyglot
328e7d870df4f992a28b6dbd149fa089
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAEventSelect
kernel32
VirtualFreeEx
user32
GetInputState
advapi32
RegFlushKey
Sections
.text Size: 1024B - Virtual size: 948B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 42B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ