Static task
static1
Behavioral task
behavioral1
Sample
5b11beb9b78cb16e1ead633038bb8964_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5b11beb9b78cb16e1ead633038bb8964_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b11beb9b78cb16e1ead633038bb8964_JaffaCakes118
-
Size
108KB
-
MD5
5b11beb9b78cb16e1ead633038bb8964
-
SHA1
5f459dbdf257a12e7d245c6949b1a44eec7df644
-
SHA256
b49e8f9ff1c7214d871c2f28721e3bc8bdab10bced2cbba0a5211d588e4289d7
-
SHA512
e0fe96611cdf179de2ebf8f3fb1f90813edff6ef4a5f868e8911235a7fa8f227212142afea922b9bcbb1ee83a5ffdc06822637f470e8812e4458f080fa589769
-
SSDEEP
1536:OaLr24f06guFmO9YY8Hj/Q+56H7KWBNJXiWfB65mzYFKxK5+m5TnlPDUiJRb:32p6v3F8HzQFb3JXiWwYEHN9RDJRb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b11beb9b78cb16e1ead633038bb8964_JaffaCakes118
Files
-
5b11beb9b78cb16e1ead633038bb8964_JaffaCakes118.exe windows:4 windows x86 arch:x86
0467ef43e1557030aa0d35e1b12378a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
Beep
CancelWaitableTimer
ConnectNamedPipe
ContinueDebugEvent
DeleteFileA
EndUpdateResourceA
ExitProcess
FindAtomA
FindCloseChangeNotification
GetAtomNameA
GetCommandLineA
GetFileAttributesA
GetFileType
GetModuleHandleA
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetSystemDefaultLCID
GetThreadPriority
GetVersion
HeapAlloc
IsDebuggerPresent
IsSystemResumeAutomatic
LocalSize
QueryPerformanceCounter
SetUnhandledExceptionFilter
SleepEx
UpdateResourceA
WaitNamedPipeA
WideCharToMultiByte
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memset
signal
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 352B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE