Static task
static1
Behavioral task
behavioral1
Sample
5d17c2adb4833ab9f6ef12d1bde5a9d8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5d17c2adb4833ab9f6ef12d1bde5a9d8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d17c2adb4833ab9f6ef12d1bde5a9d8_JaffaCakes118
-
Size
25KB
-
MD5
5d17c2adb4833ab9f6ef12d1bde5a9d8
-
SHA1
b81c5640b7a18a9b8950d239613e4025e221aaf2
-
SHA256
41343201a89bd4cc5e4a16989077d500ea080175bef96fd71aa49dc6e9a757d3
-
SHA512
6d1617dd06de866fc8c18385cb18e2ab719632cef4c0a6c280108785f87f239896e6041cc6a2765cb68cde3007975847687791d4b92066742fe9a791451a88e1
-
SSDEEP
384:pO6oOJ9evo97boLTAb05tvZkoYT2Alkp4c40f7+9:seGTqadZkf2UlufE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d17c2adb4833ab9f6ef12d1bde5a9d8_JaffaCakes118
Files
-
5d17c2adb4833ab9f6ef12d1bde5a9d8_JaffaCakes118.exe windows:1 windows x86 arch:x86
50dd56e8c6f9914775718bb75e8a69d2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
user32
GetKeyState
SetActiveWindow
GetFocus
gdi32
EndDoc
LPtoDP
SetMapMode
Sections
.idata Size: 512B - Virtual size: 320B
IMAGE_SCN_MEM_READ
.code Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ