Static task
static1
Behavioral task
behavioral1
Sample
5e82175cb4de8f223449159fd8a5e0bf_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5e82175cb4de8f223449159fd8a5e0bf_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e82175cb4de8f223449159fd8a5e0bf_JaffaCakes118
-
Size
129KB
-
MD5
5e82175cb4de8f223449159fd8a5e0bf
-
SHA1
5b648311afe241d1a876ad54b9d9062318d1e16c
-
SHA256
7b0a690d9cb82c767c978763eb468170f77bc847a6721bacaaf561ed9269f79c
-
SHA512
946942940fd66084f69306e39bb2ab879f0a37cda7e23c0e1830e3cd807fe0e21bd9b14a8a4b9ad37ea848a7e0e58f1ce906cb1cbd47c29d9004126af0bb720d
-
SSDEEP
3072:fzZpr30f2QIozikwUTwvtYClxOINOP/YdLdgulIj1qWvEK1asnL7Y:fLrEfRziyT8tB5c/hlj4Mv1ZnA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e82175cb4de8f223449159fd8a5e0bf_JaffaCakes118
Files
-
5e82175cb4de8f223449159fd8a5e0bf_JaffaCakes118.exe windows:4 windows x86 arch:x86
93ba2a8cc233cd1969707074da61d863
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
advapi32
RegOpenKeyExA
Sections
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE