Static task
static1
Behavioral task
behavioral1
Sample
a5b32105dd3072d9ffd478f09ae84890_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a5b32105dd3072d9ffd478f09ae84890_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a5b32105dd3072d9ffd478f09ae84890_JaffaCakes118
-
Size
2.2MB
-
MD5
a5b32105dd3072d9ffd478f09ae84890
-
SHA1
fe0050cfb6b11e9962b73d71b68b2fccbbe89dad
-
SHA256
34048485a9d46cf57cafe427d3b8e8fdf10de3145d74470aee2c0b84b6407562
-
SHA512
78889b2ce8ed5aa38acb01c49ef8ae1a72efd920e0c58cab36b3bb87602418a1dee150a1ea767525f2bdb70ee64a753d14e0e39d5fdd1381f544aa963fbc9ea2
-
SSDEEP
24576:QaXEgzAukyfHSKSWBVzsA2KCEBJhTLtJ3yXlkH6/TkFivPlADXLqdPyz0LAHjreN:QBg7rOAzPJ3S/Y8ALayz0LA+lh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5b32105dd3072d9ffd478f09ae84890_JaffaCakes118
Files
-
a5b32105dd3072d9ffd478f09ae84890_JaffaCakes118.exe windows:4 windows x86 arch:x86
a7333743ef063a68d1d860bbdf1c328e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
VirtualAlloc
Sections
WINEXEC Size: 343KB - Virtual size: 764KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WINEXEC Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WINEXEC Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WINEXEC Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WINEXEC Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.8MB - Virtual size: 10.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WINEXEC Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE