Static task
static1
Behavioral task
behavioral1
Sample
0d13a8c42ef299f1c1630c52b481a05c_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0d13a8c42ef299f1c1630c52b481a05c_JaffaCakes118
-
Size
121KB
-
MD5
0d13a8c42ef299f1c1630c52b481a05c
-
SHA1
6529597e8d3f3fb4f5aa836a07d48922706b1364
-
SHA256
6be1d5a271d6a0706b37d9f644cbceec10651b330ddf269db9ee552f2705b986
-
SHA512
c8673279fb4f5fd6030a6ca95138aa04337a06361e838043b4e0934d8f7d1ec4554bfee8b67cb0c4ceef8464e6b82d14f8e65a3db4e05a0942bd71f73166f6df
-
SSDEEP
3072:KFYtWMF1nz9EvRzqcqwSETX3dn3GABTcaSj:myz9EizsnNGA6aS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d13a8c42ef299f1c1630c52b481a05c_JaffaCakes118
Files
-
0d13a8c42ef299f1c1630c52b481a05c_JaffaCakes118.exe windows:4 windows x86 arch:x86
68140a9a4b28871f88884585977b9263
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryA
CompareStringA
GetProcAddress
LoadLibraryA
GetTickCount
user32
DispatchMessageA
TranslateMessage
GetMessageA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ