Static task
static1
Behavioral task
behavioral1
Sample
5132cf3e1e36bd22aa58b3ed39f6af01_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
5132cf3e1e36bd22aa58b3ed39f6af01_JaffaCakes118
-
Size
2.2MB
-
MD5
5132cf3e1e36bd22aa58b3ed39f6af01
-
SHA1
6fcc0b02e0dae397207ea3364aea985933cef1ef
-
SHA256
15c40c59fff4fe727a4aa18138e7f706949e9e7fb0634c656d9f12ffe2502bc1
-
SHA512
07596727bee888fe95d83b50de6852279d7d7dcb45d69dcc6bfc95161b5604b1f85a5914131bbe6e7dbd5adab22a62a75a5acc713b978878409942df12fbcabf
-
SSDEEP
49152:ISTkcr7INFE8u81QGQHe294cY+w2WXt70mwNd:ISISINXu8tQ+Ddpt703
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5132cf3e1e36bd22aa58b3ed39f6af01_JaffaCakes118
Files
-
5132cf3e1e36bd22aa58b3ed39f6af01_JaffaCakes118.exe windows:5 windows x86 arch:x86
79b3362178937bf9559741c46bb9e035
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
Sections
.MPRESS1 Size: 2.1MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE