Static task
static1
Behavioral task
behavioral1
Sample
1c5b318027314403b8c80ce5b2fe6d77_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1c5b318027314403b8c80ce5b2fe6d77_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
1c5b318027314403b8c80ce5b2fe6d77_JaffaCakes118
-
Size
71KB
-
MD5
1c5b318027314403b8c80ce5b2fe6d77
-
SHA1
eb2bbb8cffacf031b83ccab78944785f0a1dc0df
-
SHA256
7038c2fed1c3baa9d81cfe8cf9f64987ca1d13222f68d17854770440b573cc7a
-
SHA512
8e56f38b8f18f4085c3268232077f498d7f42ecb7661f6d5af5e3c880e3221abf178a3ea9f835fa27c4ac2218723a05cf66a6be9d7e8d5fb6854ffe9926f0262
-
SSDEEP
1536:8mVax9g2Y1A3I4H517adPfEiwb8G8JmO/wfur4raXqe9AAPlhiv6:yg2Ya3I4nafC83ofur6MP93lh7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c5b318027314403b8c80ce5b2fe6d77_JaffaCakes118
Files
-
1c5b318027314403b8c80ce5b2fe6d77_JaffaCakes118.exe windows:5 windows x86 arch:x86
5bdc41c6e791e5dfadb53454999bd37c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
GetCommandLineA
user32
RegisterClassA
LoadIconW
shlwapi
StrCmpNIW
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DER Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ