Static task
static1
Behavioral task
behavioral1
Sample
050422488fade9bebb1c67068593f896_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
050422488fade9bebb1c67068593f896_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
050422488fade9bebb1c67068593f896_JaffaCakes118
-
Size
35KB
-
MD5
050422488fade9bebb1c67068593f896
-
SHA1
28361402b255de1b836b14d8bfc52da961e5bac7
-
SHA256
67c49a1bf912d5027b8a3af0e380b6afc8dfb47abee0fbc9e7051c3de1720527
-
SHA512
de5f82565be1182c32727c99f0fc732ee3a528eabb6ed303a25dfd1ba3e00e85739c43943f30d3d0838de9e3e9969d04ab7fe2b481f1d33a088872ae39cf2214
-
SSDEEP
768:2mcYrZvqWsyeEDAgyb1mTiDV2+ugpDyrcsnug7n5vjz:2TYrZvqWpDAB5jDyrNugrl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 050422488fade9bebb1c67068593f896_JaffaCakes118
Files
-
050422488fade9bebb1c67068593f896_JaffaCakes118.exe windows:4 windows x86 arch:x86
56e7e28a3e36d7a48b2d2d13c26f37f3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAEventSelect
netapi32
DsGetDcNameW
kernel32
UnmapViewOfFile
GetEnvironmentVariableW
user32
GetInputState
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 46B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ