Static task
static1
Behavioral task
behavioral1
Sample
005f99ea4b2f54b717ac74853d17386d_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
005f99ea4b2f54b717ac74853d17386d_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
005f99ea4b2f54b717ac74853d17386d_JaffaCakes118
-
Size
83KB
-
MD5
005f99ea4b2f54b717ac74853d17386d
-
SHA1
8716e8c8f2c6ee8deaaf25a95d075c063932130c
-
SHA256
58231c77de7442a4240ff93c95454fe82285052fc5c1e8e8dd371a0c7d88f638
-
SHA512
b35d1dd2331f5dcd2ccc31596e3da216918231661f6c0d200ea2eb402fb73d51e91aed79f4a64252e174102478df41e8c73c4439d112bf9805f334233d695b7c
-
SSDEEP
1536:EvefW3MhOQ6/7UDX6NVdziXwtkzoF85BRKpxCqzyZPvNJGYwS/nc0o5c:5W3Q6/QDXGdjm085BRKpsqKTv+d5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 005f99ea4b2f54b717ac74853d17386d_JaffaCakes118
Files
-
005f99ea4b2f54b717ac74853d17386d_JaffaCakes118.exe windows:4 windows x86 arch:x86
500ff1538958cc73738bf0c262a1773f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
user32
MessageBoxA
Sections
StatMan Size: 14KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
StatMan Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
StatMan Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
StatMan Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
StatMan Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE