Static task
static1
Behavioral task
behavioral1
Sample
f1fcc260250eb24d79a27ac2e11a7582_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f1fcc260250eb24d79a27ac2e11a7582_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f1fcc260250eb24d79a27ac2e11a7582_JaffaCakes118
-
Size
364KB
-
MD5
f1fcc260250eb24d79a27ac2e11a7582
-
SHA1
21a2a16ea4c6d27fe37cefe8e3e3bf7ac1725cc6
-
SHA256
f00c471aa18520258b2fed8abef1c5353760c3b8d357320092617da48fa58ccd
-
SHA512
603f3599785e804e40d636b36aea72b131c38c0ccd168a4aff9b29fe65bf8d0e64196c69bf5c48718e5c59e25bc815446abdf8ccda1fc69919607f6d13ede7a6
-
SSDEEP
6144:nlXY4mDzaldqz07oY/udcsBHtmjULPsyLDpwXlPugJN1+x5klz+t5:npY4mDzaHg3cjUL0yLDpwX9Hhg5k2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1fcc260250eb24d79a27ac2e11a7582_JaffaCakes118
Files
-
f1fcc260250eb24d79a27ac2e11a7582_JaffaCakes118.exe windows:4 windows x86 arch:x86
22deaa3e5166e3019a02358581c9a9ee
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
_lopen
ExitProcess
user32
MessageBoxA
shell32
ShellExecuteA
Sections
Size: 270KB - Virtual size: 720KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svkp Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE