Static task
static1
Behavioral task
behavioral1
Sample
089f47b89fb005b731ae5687c9e5b5f5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
089f47b89fb005b731ae5687c9e5b5f5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
089f47b89fb005b731ae5687c9e5b5f5_JaffaCakes118
-
Size
184KB
-
MD5
089f47b89fb005b731ae5687c9e5b5f5
-
SHA1
3b95757000a906f5c047bb98b5457e9d85cc1d31
-
SHA256
42b0ee97a7c1be0a69b2887a233402bf13fd25b1f8e434d0265b105f47ad6c18
-
SHA512
27ee71ab64a3eff042cee87bcefb1708afbf4fd725fa486b421fb76d6a6eeab94610eee4e2fa800d65e40725bf460012c14b343ffa45bbf87d6d5822a8d1fa86
-
SSDEEP
3072:XeHUcMMMXwrGFox/mb9ALbC4wUxqkl1muSVds3aunTfFru+e9Gzz4zgTEQibXSc:XJF0rGembkOPSqklkjDsKa/blIr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 089f47b89fb005b731ae5687c9e5b5f5_JaffaCakes118
Files
-
089f47b89fb005b731ae5687c9e5b5f5_JaffaCakes118.exe windows:5 windows x86 arch:x86
f18c186e960e2b5d6b914ddaed95f93a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsCharLowerW
kernel32
LocalAlloc
shlwapi
StrCmpLogicalW
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rt_ecx Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rt_esp Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rt_eax Size: 512B - Virtual size: 190B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rt_edx Size: 512B - Virtual size: 54B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rt_ebp Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rt_ebx Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rt_edi Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ