Static task
static1
Behavioral task
behavioral1
Sample
f5b8dd882231676083425d31c35a0242_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f5b8dd882231676083425d31c35a0242_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f5b8dd882231676083425d31c35a0242_JaffaCakes118
-
Size
444KB
-
MD5
f5b8dd882231676083425d31c35a0242
-
SHA1
5e85223bf39e4b34b20bdff079a7da10dc6a7aae
-
SHA256
443279d3c5ded67856793fbcbf71e5cc69604a3239c93177db1f1ea6f9418ea6
-
SHA512
594cccb7dabcb416316bae4c6e485632510aea9a0ed34d74eed51d6c51eb2b7ddd075376fb3f2097f58f0fbcb007e9a83271dd0d39ad064a8a9b47c42cc964dd
-
SSDEEP
12288:Q/Jx/IwFtv2Y7E/T9lh04gbrAkSTn6n+a8+0C:gJZFx2Y7E7Zgryz++a8+0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5b8dd882231676083425d31c35a0242_JaffaCakes118
Files
-
f5b8dd882231676083425d31c35a0242_JaffaCakes118.exe windows:4 windows x86 arch:x86
1699e738294bd64925146966f15c011b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlClearBits
user32
GetClipboardOwner
GetShellWindow
GetDoubleClickTime
Sections
.text Size: 440KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 233B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE