Static task
static1
Behavioral task
behavioral1
Sample
133eda02b6b85d79172079e18954da70_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
133eda02b6b85d79172079e18954da70_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
133eda02b6b85d79172079e18954da70_JaffaCakes118
-
Size
199KB
-
MD5
133eda02b6b85d79172079e18954da70
-
SHA1
2c54ad62e26aa5165ca22f74b3a97c18c8abc88e
-
SHA256
1a945620fd0f8fe6b3369be8613fadbcee2f429c60ac130be18f3ea0026c0312
-
SHA512
ea23bc718c743c9ad403af357e17b920892f8db69bde393bac8dc4c656138a4b26c2ad92249173d0b8de471d966ce775b638bfe3cf719d1bb4fdb90bc3a3d1eb
-
SSDEEP
3072:PFbq3fPH6T5cqtlKBBGIwgp2EAL7276Q:dbhTyBtH2BLI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 133eda02b6b85d79172079e18954da70_JaffaCakes118
Files
-
133eda02b6b85d79172079e18954da70_JaffaCakes118.exe windows:4 windows x86 arch:x86
d0cf9f348d10aa00425c41b81b8061f3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessagePos
kernel32
GetACP
Sleep
VirtualAlloc
GetCurrentThread
VirtualFree
ExitProcess
Sections
.text Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 255B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dsfwer Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ