Static task
static1
Behavioral task
behavioral1
Sample
5b1e175dd02a4103c97f315287ef00aa_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5b1e175dd02a4103c97f315287ef00aa_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b1e175dd02a4103c97f315287ef00aa_JaffaCakes118
-
Size
96KB
-
MD5
5b1e175dd02a4103c97f315287ef00aa
-
SHA1
9c518baa4a28302accf25a081bb29a5665a852ba
-
SHA256
09a74187fde33942b91358e225f2a4fc6d9b89cac6539edf8f35d6a35221c17c
-
SHA512
b4ca273ca1b317d337e79a8d328616a1c4534266a191106cf4514c927dbb2e5262614839b8235562df4c562e5cfca48d90337c4829d6fbca8058c23672cac29d
-
SSDEEP
1536:PLmHoHrhqLTFu98hCTCjSHm+n05T8SAU7igAB:zmErA3FySCAI85Tx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b1e175dd02a4103c97f315287ef00aa_JaffaCakes118
Files
-
5b1e175dd02a4103c97f315287ef00aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
6531deaa3111681efe5fa4140788267b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDesktopWindow
kernel32
Sleep
VirtualAlloc
GlobalFindAtomA
VirtualFree
ExitProcess
Sections
.text Size: 512B - Virtual size: 238B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 239B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dsfwer Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ