Jeatyxouca
Static task
static1
Behavioral task
behavioral1
Sample
1b78c272c9c173e039fe5496ccb1d5f6_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1b78c272c9c173e039fe5496ccb1d5f6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1b78c272c9c173e039fe5496ccb1d5f6_JaffaCakes118
-
Size
51KB
-
MD5
1b78c272c9c173e039fe5496ccb1d5f6
-
SHA1
1b2c16f90ae43b983d9a8441921dd3f90ccd70b5
-
SHA256
e5b5658e02b1cb3a03e5259d1cc2632a95755ec5da92f696388f9481f1452fe6
-
SHA512
0c7e4d3b030c28aafe23a416330ad06b9c1b2a59d6d1fde3cf230aa0222bf89dc41b9fb18373491eabefb9a4c912bed4eacc5d14fda0bf7d129dce0a9eef54de
-
SSDEEP
768:D1WwJwLDhR0SKIBA8mKuwOC939D1U7QhCKSUqFd/8XztqQ0AiTnc5ui:wwEhxURwnpDU7mNSUqFdW8Q0M5ui
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b78c272c9c173e039fe5496ccb1d5f6_JaffaCakes118
Files
-
1b78c272c9c173e039fe5496ccb1d5f6_JaffaCakes118.exe windows:5 windows x86 arch:x86
f0379f36d280a6b3725110470c2247bd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetPriorityClass
GetPriorityClass
ExitProcess
GetFileSize
AddAtomA
shell32
DllUnregisterServer
DllRegisterServer
user32
GetMessageW
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
tborgoig Size: - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ