Static task
static1
Behavioral task
behavioral1
Sample
f4265f3b658dbebfbae401f90cdab43a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f4265f3b658dbebfbae401f90cdab43a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f4265f3b658dbebfbae401f90cdab43a_JaffaCakes118
-
Size
106KB
-
MD5
f4265f3b658dbebfbae401f90cdab43a
-
SHA1
b6ac37365937a390cf94512caaee92c9fde9c916
-
SHA256
ca833bf602c7d39d4486f2a3e8d12410e76611198d5ddbb7eac9c2dc0301887e
-
SHA512
0e38a6871b5487c1abf002022e749d0e2bb58d735cae0339072de98a2ae0066f6773db690e2167ac465a48906d3a59c5e355c189108af4ad62c3b4c4c4bd8348
-
SSDEEP
1536:Hw1lC7CA8gV2snFX0T2+zYV4czByNhxCYQqcmd81nfpT9kshLhXAOIk:QSC/0+6+zYVJw38YQqh8lfD5hFXVr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4265f3b658dbebfbae401f90cdab43a_JaffaCakes118
Files
-
f4265f3b658dbebfbae401f90cdab43a_JaffaCakes118.exe windows:4 windows x86 arch:x86
b03ceb9c474e7db0109529f37e177e6c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
VirtualProtect
GetModuleHandleA
GetProcAddress
user32
wsprintfW
advapi32
RegCloseKey
Sections
.text Size: 103KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 637B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aishuia Size: 17B - Virtual size: 17B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE