Static task
static1
Behavioral task
behavioral1
Sample
0d7eea1980cee1846da3cf8b4a9e0aad_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0d7eea1980cee1846da3cf8b4a9e0aad_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0d7eea1980cee1846da3cf8b4a9e0aad_JaffaCakes118
-
Size
514KB
-
MD5
0d7eea1980cee1846da3cf8b4a9e0aad
-
SHA1
3565d14fec67527309d6e535924554b02b29f097
-
SHA256
22b8324999321ca1d8c88d5867726141ca81a8ab2160b6ce637676ca96d44c23
-
SHA512
48784111a89ba10f2403b3d6e5c6998407d3e47d785d5db7af69595882001223b43244d530e9a59235a70cae21efee2922f64cfe4fd220d91a4559857352ffd6
-
SSDEEP
6144:QcFYAtC/YIOAFVoVcJkCO/AVl8d94AuQbnDVEYmWZ5Hh9oha2gGZ9z:QcU/dPfYcP8bM0nqYx/Hh6Ek9z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d7eea1980cee1846da3cf8b4a9e0aad_JaffaCakes118
Files
-
0d7eea1980cee1846da3cf8b4a9e0aad_JaffaCakes118.exe windows:5 windows x86 arch:x86
994ba4eb27d1c1341fbfe2a97db02798
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathIsContentTypeW
kernel32
GetCurrentDirectoryW
user32
GetDesktopWindow
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
net3e Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
net1e Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
net5e Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
net4e Size: 512B - Virtual size: 54B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
net2e Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 277KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 283KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.5net3e Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE