Static task
static1
Behavioral task
behavioral1
Sample
f5d6ec031531d9afc33ca25302c48329_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f5d6ec031531d9afc33ca25302c48329_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f5d6ec031531d9afc33ca25302c48329_JaffaCakes118
-
Size
26KB
-
MD5
f5d6ec031531d9afc33ca25302c48329
-
SHA1
09ab870745d7c1f2a97f71f529730f1e0cce2720
-
SHA256
fe3f77962dacaa748c54fef3973b4f142a8376f8995783ae86a3ee107b0f19d9
-
SHA512
ec8dd34bf826fdf760ab7588ac75ede758be56a035c70c4ce139f7325a7e7d471c1c4ee96efa2a6b21472896fbffae434e365c63efc3b4f1f1cad5963a4ddcd9
-
SSDEEP
384:VTb6H30FuojOU9mlm0R9dphVHJecKyaDh90pnYhfx1KHgmHd56IM:VTb6XSvjf9kdTVHJ9qcNafxkHgm95
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5d6ec031531d9afc33ca25302c48329_JaffaCakes118
Files
-
f5d6ec031531d9afc33ca25302c48329_JaffaCakes118.exe windows:1 windows x86 arch:x86
372d1cd8e8551c1e128a94362e097717
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExA
LoadIconA
LoadCursorA
RegisterClassA
GetMessageA
DispatchMessageA
DefWindowProcA
SetWindowLongA
gdi32
CreateHatchBrush
kernel32
GetCurrentThread
shlwapi
StrChrA
Sections
.idata Size: 512B - Virtual size: 458B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE