Static task
static1
Behavioral task
behavioral1
Sample
b5d2befef0aae4b9a4e0fa86e29b3d5e_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
b5d2befef0aae4b9a4e0fa86e29b3d5e_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
b5d2befef0aae4b9a4e0fa86e29b3d5e_JaffaCakes118
-
Size
1.9MB
-
MD5
b5d2befef0aae4b9a4e0fa86e29b3d5e
-
SHA1
ce6b6a81fbc29906f5f4ba4497c3d50abdfe4591
-
SHA256
315264bdb12ab30d65689a0ca95fcc15e884b5ac4c0e5b4d62aa61ec496f9da5
-
SHA512
8c7fb0d907951a292d3b524e03156a37a9d3b95b0054b6088fee20a0b996de4073e7f8ae8af8bced42f0401f287c6c9d168c919618fc1388f74b051e9c4d2d00
-
SSDEEP
49152:45/DDHcCUH81Q5GJKF6ZD5Q8cYySQoOwS:MLDcCUc1nJKFU53S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5d2befef0aae4b9a4e0fa86e29b3d5e_JaffaCakes118
Files
-
b5d2befef0aae4b9a4e0fa86e29b3d5e_JaffaCakes118.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 50KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sozfoaqp Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bwcentpm Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE