Static task
static1
Behavioral task
behavioral1
Sample
5bd81b5bf9752b18699bffee1054b144_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5bd81b5bf9752b18699bffee1054b144_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
5bd81b5bf9752b18699bffee1054b144_JaffaCakes118
-
Size
56KB
-
MD5
5bd81b5bf9752b18699bffee1054b144
-
SHA1
94012f0bd9935e16e26186408fc544eedf4f57b1
-
SHA256
83fc764120403db36e9ab84c5df5157bdc1317c3f65f59a354d97365b64054e9
-
SHA512
a4a7ec2a915b61acee73262df85961ab7b1f0d091c384b5cc06f6366f8970b7ddd544be722d70a3dd855e5b58edd9f1fff9010ecad69c03bf67fe6122c4f8372
-
SSDEEP
768:ylCXjJDHQa7LbIFlO4xUJGQgWE6XiDXOyuCvMYNKlRmFnk+IYB9U3befGp9Pc5Gj:wCXcT3sE61yuzc1Fk+bXU3be29m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bd81b5bf9752b18699bffee1054b144_JaffaCakes118
Files
-
5bd81b5bf9752b18699bffee1054b144_JaffaCakes118.exe windows:4 windows x86 arch:x86
bff2fceda0b10a802e8706dacc78c4dc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcp71
?_Nomemory@std@@YAXXZ
msvcr71
_iob
sdl_image
IMG_Load
sdl
SDL_Quit
Sections
.MPRESS1 Size: 49KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE