Static task
static1
Behavioral task
behavioral1
Sample
5fba5bd5802e36b91bb2c60ce45899f1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5fba5bd5802e36b91bb2c60ce45899f1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5fba5bd5802e36b91bb2c60ce45899f1_JaffaCakes118
-
Size
29KB
-
MD5
5fba5bd5802e36b91bb2c60ce45899f1
-
SHA1
922d18655be5975f620b660e40840524c7c4b6a6
-
SHA256
8138aae265aaa43460820501154254fea290bc2bee2b6061efad9550274a9f14
-
SHA512
ecf699f19005f3389164ae61f5b955580a73c15368a49d82e1b94593e410e754bcbe755b5a63c5b7793cb0a1b08c2b690b751bb08e2632810a3b2c61823581a7
-
SSDEEP
768:5FrqsBD7qWFjM3WsT3UDnyFuvZxFatJyid/V:j+sBD7qWFjkWOwnzaiidN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fba5bd5802e36b91bb2c60ce45899f1_JaffaCakes118
Files
-
5fba5bd5802e36b91bb2c60ce45899f1_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 18KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE