Static task
static1
Behavioral task
behavioral1
Sample
5b7b8316cb5a16558cb8fb4ec7191a93_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5b7b8316cb5a16558cb8fb4ec7191a93_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b7b8316cb5a16558cb8fb4ec7191a93_JaffaCakes118
-
Size
35KB
-
MD5
5b7b8316cb5a16558cb8fb4ec7191a93
-
SHA1
51e3fc43cc9a3743b3370b2d506da6fe137ab07b
-
SHA256
cc7f0a971dc4f30b101daa9d7ebf39e724a97d889c606b3debbcf7bf8c7c0e50
-
SHA512
48463810825eb9adea01ade7cbd822435d2f9517c3446613316457dc1c339b8f8538edaa8eecaa8e56ac3f5af7d60aab9b4afa8e673238c909d11d6d428eb05b
-
SSDEEP
768:pMEOe0nq0ZB2Ql3KgH0FmqbKCwK4mdgd5E26B+Frd4hZAdJVX3D:hOe0v2C3KHKTK4mcC2WCd4hZAdzX3D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b7b8316cb5a16558cb8fb4ec7191a93_JaffaCakes118
Files
-
5b7b8316cb5a16558cb8fb4ec7191a93_JaffaCakes118.exe windows:4 windows x86 arch:x86
e3516c04ac50559e65cf9a28b29d7802
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
DeleteFileA
ExitProcess
LoadLibraryA
Sleep
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE