Static task
static1
Behavioral task
behavioral1
Sample
f5d6931ab7e17fc0d8691623be7f3b26_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f5d6931ab7e17fc0d8691623be7f3b26_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f5d6931ab7e17fc0d8691623be7f3b26_JaffaCakes118
-
Size
181KB
-
MD5
f5d6931ab7e17fc0d8691623be7f3b26
-
SHA1
828ca38beddc1df022bc0108ab11766800f956a8
-
SHA256
f889378bd9824851318d8e33b369a0a42100aa18da99569c60584f29235c8c34
-
SHA512
f9fe8fa2c7cf37513d864a9d874a14967c94066684e5bfac7f9db53c84b9e553d395348f38f73012c7a1ea23051224595f902fc70869b8093f7b93c43b9649d8
-
SSDEEP
3072:9AE55K/V3RyQBgqp0gcuDVWh0Oel1sftXCodBY+iPEeC9bwVkW8DW7Q1:V5a3DgVgdpW+FcftXJNuE3pwGX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5d6931ab7e17fc0d8691623be7f3b26_JaffaCakes118
Files
-
f5d6931ab7e17fc0d8691623be7f3b26_JaffaCakes118.exe windows:4 windows x86 arch:x86
6fd9e4922302a7100112b02114621901
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
NdrComplexArrayFree
UuidCreate
user32
ClipCursor
RedrawWindow
DestroyMenu
FindWindowA
CreatePopupMenu
TrackPopupMenuEx
GetDesktopWindow
shell32
Shell_NotifyIconA
kernel32
FlushInstructionCache
MapViewOfFile
GetModuleFileNameW
FindFirstFileA
EnumResourceNamesW
SetFileShortNameW
DuplicateHandle
UnmapViewOfFile
FindResourceExA
FindClose
winmm
timeEndPeriod
Sections
.text Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ