Static task
static1
Behavioral task
behavioral1
Sample
f514874c765cd2db84f8cdee3e9e1a7c_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f514874c765cd2db84f8cdee3e9e1a7c_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f514874c765cd2db84f8cdee3e9e1a7c_JaffaCakes118
-
Size
37KB
-
MD5
f514874c765cd2db84f8cdee3e9e1a7c
-
SHA1
ab11968f3adbf6a95d145ad9b27a04565208c8c8
-
SHA256
54fd28b4842445d74093df703aeb84a03ee4508f854b086b64d6b2fca32ed224
-
SHA512
e7a55a8fea520dec8dd322a49d88fa10c07363c9d4ae314786573d843b5c63018be8ac6c33e855eb715a6ee0d97f07904140806d38928a1b6d265a1992c00f89
-
SSDEEP
768:gjOKraIhzIHPnPbC6W5SQHZJRCBwGfcAE8/lzIaOfpzhakuS0nODKxJJUBc:g6hBPrASQ5JRCBwGfcADApcNS0rJv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f514874c765cd2db84f8cdee3e9e1a7c_JaffaCakes118
Files
-
f514874c765cd2db84f8cdee3e9e1a7c_JaffaCakes118.exe windows:4 windows x86 arch:x86
77a70aac9aeea9c15b5485c59b38202b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
MoveFileExA
VirtualAlloc
lstrlenA
user32
FindWindowA
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE