Static task
static1
Behavioral task
behavioral1
Sample
fa1c80391d2505dc804f02453a5a7552_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fa1c80391d2505dc804f02453a5a7552_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa1c80391d2505dc804f02453a5a7552_JaffaCakes118
-
Size
112KB
-
MD5
fa1c80391d2505dc804f02453a5a7552
-
SHA1
5ffdbbd50d65f39d2b60ad0d1418a5faea714802
-
SHA256
14be1fcc041527e53ded5f965f8a5476038aedc41ef01fde134ddce13bf83a6b
-
SHA512
049293d5ec65a0694b84fb5f2ed3fa42ed56e59475c3872a7c71bd59f8f505ff8724a2c513839ae304f333919ee2a6ee8fa4cd4263dc0f49192e94da8f67040d
-
SSDEEP
1536:sRXoRLaV55MfS5/PpWnjiPP10ZYK7CKg4ZmW757FlA3QoIrHtPlzn:sRX6u5MfS5HpiJBO4E+57LoytNz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa1c80391d2505dc804f02453a5a7552_JaffaCakes118
Files
-
fa1c80391d2505dc804f02453a5a7552_JaffaCakes118.exe windows:5 windows x86 arch:x86
b7bc2867fa6790ffc6dd4f567cb302da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
VirtualFree
lstrlenA
Sleep
ExitProcess
winmm
timeSetEvent
comctl32
InitCommonControls
Sections
.text Size: 512B - Virtual size: 254B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE