Static task
static1
Behavioral task
behavioral1
Sample
f897a84695ee7e851cf2fe8453b58995_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f897a84695ee7e851cf2fe8453b58995_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f897a84695ee7e851cf2fe8453b58995_JaffaCakes118
-
Size
462KB
-
MD5
f897a84695ee7e851cf2fe8453b58995
-
SHA1
c6f4831867fdc76d83b91656a99fa6e92f932418
-
SHA256
3ac342b55f74cd0488a2c85e1962122914e2917ba0a63cf8a91fcda753d5b814
-
SHA512
36af6e7fe3f2b6b701a0542ed92037a4696f6b0f201aa4075e260ceacef76bd0ab224ab686e4eedef47411aefaa53df2157a00f9837637195af5257b4c47ef9c
-
SSDEEP
12288:b1VKjBLFnCq+v+TfOmRO1FBEhE+zbHpG9K7KJV+uBqwWkER:b1VKlL8vIfOmRO1FBmE+zbIkKV+uGR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f897a84695ee7e851cf2fe8453b58995_JaffaCakes118
Files
-
f897a84695ee7e851cf2fe8453b58995_JaffaCakes118.exe windows:1 windows x86 arch:x86
f81d43832b04fcd52bf053c9e75e5e61
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
LoadLibraryA
GetProcAddress
GetModuleHandleA
VirtualAlloc
user32
MessageBoxA
Sections
.DATA Size: 1KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.FORTH Size: 460KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE