Static task
static1
Behavioral task
behavioral1
Sample
1331918fb720e1139bb57f55c3a43bcb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1331918fb720e1139bb57f55c3a43bcb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1331918fb720e1139bb57f55c3a43bcb_JaffaCakes118
-
Size
35KB
-
MD5
1331918fb720e1139bb57f55c3a43bcb
-
SHA1
1a5bb01bad4cbf3b49191018cb1b71b787b12e51
-
SHA256
c48f9b1270a03d98ac76faccee460ee63724a1b2a3a5a9928d94689e67d0f33b
-
SHA512
fd1da3277c19c7b5cad424de9f8942908eb4a8c214ee193dfcc300ba029add8185eb3469262aa88fee26eec9247e9ddd041bfc350ce3a19baad01eb07b7a1f71
-
SSDEEP
768:BVU8KEJV6IEhb9WeTc/82DSxUL1qEZl9cRp9eL58M6lUpnmvXoRq11xH:1J9EtIkOSxUZt9cn9I58M6lUpmfoRExH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1331918fb720e1139bb57f55c3a43bcb_JaffaCakes118
Files
-
1331918fb720e1139bb57f55c3a43bcb_JaffaCakes118.exe windows:4 windows x86 arch:x86
5b23761f51029a0df41f372b9eb4beae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetStockObject
GdiGetPageHandle
Sections
.text Size: 512B - Virtual size: 271B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 392B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE