Static task
static1
Behavioral task
behavioral1
Sample
2505818fedf7e253f51caafeecb4b2d8_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2505818fedf7e253f51caafeecb4b2d8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2505818fedf7e253f51caafeecb4b2d8_JaffaCakes118
-
Size
13KB
-
MD5
2505818fedf7e253f51caafeecb4b2d8
-
SHA1
e98b2ccf860beb33bd1dda001030e40a9bcb4d9a
-
SHA256
dd925ee6bf69a3e166086b4d051282a32c3a40079908675b0d53e8f3240a25ed
-
SHA512
4dbccb6a269c6b6652347357dc90132d54371065beaad936e98de36f5314d8567f2f0d4d963f2d9d3a891f84fec0ffa7fed420c7227fd550cd0baf2387ecf9ae
-
SSDEEP
384:snzXN2I46XvP0POd8dhMrnPliQerNcJQZ:stX0POVT9reJaQZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2505818fedf7e253f51caafeecb4b2d8_JaffaCakes118
Files
-
2505818fedf7e253f51caafeecb4b2d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
e7c29f34c0d189ff70fe66722b5042ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
LoadImageW
LoadCursorW
SetWindowPlacement
CreateWindowExW
wvsprintfA
GetForegroundWindow
Sections
.text Size: 512B - Virtual size: 223B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 316B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ