Static task
static1
Behavioral task
behavioral1
Sample
20d70d95decb82cd4f245aff9955aeae_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
20d70d95decb82cd4f245aff9955aeae_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
20d70d95decb82cd4f245aff9955aeae_JaffaCakes118
-
Size
91KB
-
MD5
20d70d95decb82cd4f245aff9955aeae
-
SHA1
8a248df0952fb1d0e44ff960e289a50c585cd257
-
SHA256
86a47b7f687abfff4e054553b0d55a36eaf04bc7c25f8117bd635c8926354a64
-
SHA512
17d0d742fe0de11ca755ad4d241a4ef94c10bd33d2ba2ce5880025b0330d2230fdce2839d2508fd1ba7470feabeafc2a3841673ccfeaeb353e39820462116a0d
-
SSDEEP
1536:3in/l+PQar+ytf6rLOaV/VZZ6xQ0bRVOvdEurkfM:3U/SQaKL1V9ZZ6Fbvur
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20d70d95decb82cd4f245aff9955aeae_JaffaCakes118
Files
-
20d70d95decb82cd4f245aff9955aeae_JaffaCakes118.exe windows:4 windows x86 arch:x86
e2e0a4ab21c0c1b7505ebd54da0145fe
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharNextA
GetDesktopWindow
kernel32
Sleep
VirtualAlloc
VirtualFree
ExitProcess
Sections
.text Size: 512B - Virtual size: 222B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 233B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dsfwer Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ