Static task
static1
Behavioral task
behavioral1
Sample
05f3ed21a7c82a6dde932929eb8bf7fa_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
05f3ed21a7c82a6dde932929eb8bf7fa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
05f3ed21a7c82a6dde932929eb8bf7fa_JaffaCakes118
-
Size
54KB
-
MD5
05f3ed21a7c82a6dde932929eb8bf7fa
-
SHA1
ad123228bf5e3d58466901f5726ce3bdcadf2d22
-
SHA256
b62119ac1e109925c33cc95caa812556ff9f3e6d61e402e4c42e9c610f87908d
-
SHA512
bae332e28a79fc4b0cf67a902255bb88cf76e6a410a57e30fa9cdb1241d820157249f05c8299c70703477bfedb9c41e1c8de03ef3227d93c3a9719794d2499dc
-
SSDEEP
384:QFdTh5T0wmd8aXKLofVMW1dqAchCBBmNEhf0io+NuUGM+sBC75ePAFf:QLTjTE9LvShTOhHohfySR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05f3ed21a7c82a6dde932929eb8bf7fa_JaffaCakes118
Files
-
05f3ed21a7c82a6dde932929eb8bf7fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
944f15cc6a14b0d6381c8099770e3c37
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
WriteFile
ReadFile
CloseHandle
SetFilePointer
CreateFileA
GetFileType
GetStartupInfoA
GetStdHandle
GetCommandLineA
SetUnhandledExceptionFilter
ExitProcess
user32
MessageBoxA
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 668B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ