Static task
static1
Behavioral task
behavioral1
Sample
7885004dc0250598a7b5cff30105746d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7885004dc0250598a7b5cff30105746d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
7885004dc0250598a7b5cff30105746d_JaffaCakes118
-
Size
71KB
-
MD5
7885004dc0250598a7b5cff30105746d
-
SHA1
05f209c8a38a0c43603636a80e3d45a80f682a49
-
SHA256
dafb80e91fb6453bbf1c8fdd168ea3e5df0d7eb85a4dfb5487792604068a5afe
-
SHA512
988d1b1c0821cea0bc72c091780997f6bbfafa28bdca795633113bb88dc0a4495a50f432d7a425648a9a718f9059aa46821cec6e9dee66004b9d400ac0695845
-
SSDEEP
384:wgKfIR4dasonIKIt+cx0o3nmpD6u+z4JJn0wB/2ZBYJsnS+pTqiZmK6hiZDy6P:wgDu5wM0k0WAVB/2nYQS+pxZs0y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7885004dc0250598a7b5cff30105746d_JaffaCakes118
Files
-
7885004dc0250598a7b5cff30105746d_JaffaCakes118.exe windows:5 windows x86 arch:x86
a06ba9188e296a52279b2c1196b96314
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
CreateFileA
GetStartupInfoA
user32
LoadIconA
gdi32
GetStockObject
advapi32
RegOpenKeyExW
RegCloseKey
Sections
.text Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 392B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdataA7 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdataA6 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdataA5 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdataA4 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdataA3 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdataA2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdataA1 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdataR7 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdataR6 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdataR5 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdataR4 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdataR3 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdataR2 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ