Static task
static1
Behavioral task
behavioral1
Sample
5bfc3da3e8e27a90ec62c0a5c0bd0b35_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5bfc3da3e8e27a90ec62c0a5c0bd0b35_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5bfc3da3e8e27a90ec62c0a5c0bd0b35_JaffaCakes118
-
Size
11KB
-
MD5
5bfc3da3e8e27a90ec62c0a5c0bd0b35
-
SHA1
ba0ea9f02708fb0cb54105829eca111caa9e9159
-
SHA256
d17e4f3a3e5c75d9575a421e9d1ea342c48af58f71b01d39930055c340f6d173
-
SHA512
4714742528e19e4b3d4803df390112ec81163dc6d1c482429d0fdbc5466dae7ee319a230f7a59ed700d000168f923581dd6f369e103218792529a5212c989a7e
-
SSDEEP
192:B9fXDB39+VpbMDUBKnmKcg3TjgVqMqxZL6hlb+LK:B9ftowQAQgYVIxZL6PaW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bfc3da3e8e27a90ec62c0a5c0bd0b35_JaffaCakes118
Files
-
5bfc3da3e8e27a90ec62c0a5c0bd0b35_JaffaCakes118.exe windows:4 windows x86 arch:x86
1dc5a8b8c38ab4b3ef00f0dbd274fa7c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassA
PostQuitMessage
DefWindowProcA
DestroyWindow
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
MessageBoxA
kernel32
VirtualAlloc
VirtualFree
GetFileType
GetStdHandle
GetCPInfo
GetOEMCP
GetACP
GetModuleFileNameA
UnhandledExceptionFilter
RtlUnwind
ExitProcess
GetVersion
GetCommandLineA
CloseHandle
GetLastError
CreateFileA
GetStartupInfoA
GetModuleHandleA
GetEnvironmentStrings
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 938B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE