Static task
static1
Behavioral task
behavioral1
Sample
f80118c956ffe0ddf7b04fe497f54f05_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f80118c956ffe0ddf7b04fe497f54f05_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f80118c956ffe0ddf7b04fe497f54f05_JaffaCakes118
-
Size
75KB
-
MD5
f80118c956ffe0ddf7b04fe497f54f05
-
SHA1
e94c7863d6c070792ee480c59aeeb6d54eb44eac
-
SHA256
c1240bdbc9145604521791460fe20a521efa5a0aca452ab248f69c2ae302a576
-
SHA512
e29e2eca414280f03cf13383fab951b3bd1825ac22136a80adb0c2552a880ff925c86dfff6c4f561d8976a722b36c882915a13e2e6814fe4d3402d6384504d87
-
SSDEEP
1536:R2/n85cfsMm8nKe8BwavuRK4IXlCCsWmP32qK+ANEmDdPMCSj7YPa2qQ:gE5P1eE+K4IXsdPGqqN1VMC07YP5qQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f80118c956ffe0ddf7b04fe497f54f05_JaffaCakes118
Files
-
f80118c956ffe0ddf7b04fe497f54f05_JaffaCakes118.exe windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.packed Size: - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
v7w9q55q Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4fkjdv5c Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
k26v.etj Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE