Static task
static1
Behavioral task
behavioral1
Sample
54c707c0a3c657fb570c7544e9f94bd3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
54c707c0a3c657fb570c7544e9f94bd3_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
54c707c0a3c657fb570c7544e9f94bd3_JaffaCakes118
-
Size
25KB
-
MD5
54c707c0a3c657fb570c7544e9f94bd3
-
SHA1
2b3bcd9a07b94beed9a900be174a73453edba79f
-
SHA256
de3f86267413737498468cedde66d2c79cb78debd836d6467f58acef2e00a9b4
-
SHA512
28edb2e0363c1e8dd3a9b32094c163cc1e1fd711cae4d3eb261e627020f1491a075074a15d4fd0cc90176178bfed408fcd80781414c21ad22ad62ac7628845e3
-
SSDEEP
384:Lb5Hjnt4OekhfK8n1datfuQOfBpXAt3+0DzXn3BkvYfipfz353TgYrg:Z4kX1iOfBt0qvYfipfjlTpg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54c707c0a3c657fb570c7544e9f94bd3_JaffaCakes118
Files
-
54c707c0a3c657fb570c7544e9f94bd3_JaffaCakes118.exe windows:4 windows x86 arch:x86
35c07a33e0965843a39ff6571f1f2cfe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
?terminate@@YAXXZ
_CIpow
__CxxCallUnwindDtor
_Getdays
_Getdays
kernel32
CancelIo
CopyFileA
CreateMutexA
CreateMutexA
CreateMutexA
CreateMutexA
CreateMutexA
Sections
.text Size: 13KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE