Static task
static1
Behavioral task
behavioral1
Sample
05915f72fa3210bc82f1884cc2d2f89f_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
05915f72fa3210bc82f1884cc2d2f89f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
05915f72fa3210bc82f1884cc2d2f89f_JaffaCakes118
-
Size
5KB
-
MD5
05915f72fa3210bc82f1884cc2d2f89f
-
SHA1
e5958466c588f17cc63c7f854554d22bac4834b1
-
SHA256
79d78279778cde30f7161e108d8e55a4274f1af30c4c9600b90bf8458a619697
-
SHA512
930a42ba18b570e995c7131b6905e6abf54a6e50eb39cfaa8958b2b021ef922379a86d23a908b560c272732c0a7c83705507ce8ed6417de83ed02e1e461b67c8
-
SSDEEP
24:OEhu70vc9/PGoatRHjkpqAmTBcRvv87xpMpZZN2lJ10YsEi5/KTh+OtYycH9NjuF:OEPsG7tlBdBgvv8NUvCJ10Yl+OJij
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05915f72fa3210bc82f1884cc2d2f89f_JaffaCakes118
Files
-
05915f72fa3210bc82f1884cc2d2f89f_JaffaCakes118.exe windows:1 windows x86 arch:x86
ae34c05cd079a5f0bd4cc8743d72dbb1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CloseHandle
ExitProcess
CreateProcessA
ReadProcessMemory
SetUnhandledExceptionFilter
WriteProcessMemory
GetModuleHandleA
user32
MessageBoxA
Sections
CODE Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.LOAD Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE