Static task
static1
Behavioral task
behavioral1
Sample
5aa8b59ab6354e291eb90d093e7d249a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5aa8b59ab6354e291eb90d093e7d249a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5aa8b59ab6354e291eb90d093e7d249a_JaffaCakes118
-
Size
40KB
-
MD5
5aa8b59ab6354e291eb90d093e7d249a
-
SHA1
3569d1bff1e6a200adeb0df882fb743ad3fdb35a
-
SHA256
79cfaf2661d334cd61aa166cb6f52a1c7f254275874c877e1ac69809fa7a8041
-
SHA512
70f5a6046c6ed699b0b1a5fd7a5856b894afade199ad7c597f916ce53f739d794c91de363953a3ee622f3856e65d796b4079382736ed69e955fa3d0244e97c3f
-
SSDEEP
384:94eOuaLZ14+NvxIjvTRF1YTkugGv9cIVsdB9FcsbdQoR8Y8EFkn2:OfrRpAkT9cIWkiSap
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5aa8b59ab6354e291eb90d093e7d249a_JaffaCakes118
Files
-
5aa8b59ab6354e291eb90d093e7d249a_JaffaCakes118.exe windows:4 windows x86 arch:x86
39844f815d53892cae74005d195b376c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LocalAlloc
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
GetLastError
CreateMutexA
OpenMutexA
GetStartupInfoA
user32
MessageBoxA
msvcrt
__p__commode
_exit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_XcptFilter
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 786B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE