Static task
static1
Behavioral task
behavioral1
Sample
05833eb15977df82dba08ebce88e3dc9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
05833eb15977df82dba08ebce88e3dc9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
05833eb15977df82dba08ebce88e3dc9_JaffaCakes118
-
Size
54KB
-
MD5
05833eb15977df82dba08ebce88e3dc9
-
SHA1
fd812ff0b2e171127e3d80de60bf606ff299580b
-
SHA256
e2fcdf592d1f97183f1b4d317492ad58f3258e8331aedb0a7f95e8e22a834db7
-
SHA512
4ec2b8932d413341e39f34198b2e877cadbb4a30670aff4e791da92c0b52842faf9e9bfb8e8065f39f2d56400613141c5ef8232bc00624c1c6a04c63444ab5fd
-
SSDEEP
768:qcIe2mFF0AcKHmTwwqOb8gkVgw0oUdxBBVNJ:r2m3KW4qOb6aw94F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05833eb15977df82dba08ebce88e3dc9_JaffaCakes118
Files
-
05833eb15977df82dba08ebce88e3dc9_JaffaCakes118.exe windows:4 windows x86 arch:x86
8ae7bd409b27a86d751e56db87e9df39
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ord581
ord880
ord518
ord524
ord434
ord437
ord520
ord522
ord433
ord351
ord787
ord396
ord567
ord568
ord913
ord883
ord109
ord707
ord836
ord247
ord409
ord616
ord239
ord373
ord399
ord712
ord316
ord844
ord183
ord405
ord337
ord50
ord932
ord254
ord900
ord938
ord336
ord933
ord918
ord944
ord953
ord332
ord947
ord936
ord931
ord240
ord334
ord861
ord478
ord431
ord266
ord375
user32
ord276
ord199
ord57
ord457
ord274
ord197
ord567
ord729
ord350
ord444
ord159
ord584
ord572
ord420
ord60
ord435
ord512
ord477
ord635
ord596
comdlg32
ord112
comctl32
ord17
winmm
ord166
cdecoder
ord1
avcdrom
ord53
ord55
ord51
ord54
encmpa
ord8
ord9
ord11
ord3
ord2
ord4
ord7
ord5
ord6
ord1
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 955B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ