Static task
static1
Behavioral task
behavioral1
Sample
05df61895db79d24796d8f04cbb5e65c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
05df61895db79d24796d8f04cbb5e65c_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
05df61895db79d24796d8f04cbb5e65c_JaffaCakes118
-
Size
70KB
-
MD5
05df61895db79d24796d8f04cbb5e65c
-
SHA1
ad990c45a86ded2d7166793fb56fb00933e62321
-
SHA256
c89c473bb8855ef93d330c6bac7eedd2a0abcb509bc67f34277ce975690262a9
-
SHA512
2ecaca11ca3a02e3780aaffb163a1c9c90353977bb0e49ecd5e01a77b2e2b66e2d2364befb1c1e0dd5df3d819eec81000f6162600ac7e5cd61b89e29eb0a80d6
-
SSDEEP
1536:iXC1VKZv2jJODZFQmPx5807jcVDON16VWy0oqNOb:rVK1PQKxN2S/6T08
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05df61895db79d24796d8f04cbb5e65c_JaffaCakes118
Files
-
05df61895db79d24796d8f04cbb5e65c_JaffaCakes118.exe windows:4 windows x86 arch:x86
573a8e3002c3a49e385a632af519e901
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
LoadLibraryA
GetTickCount
lstrcmpiA
CreateFileA
WriteFile
ReadFile
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
LoadLibraryA
GetTickCount
lstrcmpiA
CreateFileA
WriteFile
ReadFile
Sections
.text Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE