Static task
static1
Behavioral task
behavioral1
Sample
f9f04fd387a8dfa951ec24f3a4859beb_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f9f04fd387a8dfa951ec24f3a4859beb_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f9f04fd387a8dfa951ec24f3a4859beb_JaffaCakes118
-
Size
818KB
-
MD5
f9f04fd387a8dfa951ec24f3a4859beb
-
SHA1
d2a7d268d8d2472f1b9d23c2841fca61c12b4b33
-
SHA256
ca8a704e88c5caf48dc7b5c6f7e0e14d6c67aff995d228c98a73b0c261983bb2
-
SHA512
b51c87a48f0c9dd4c949471a31b7e913a26343081f09ba1f643f1c50dd33916eb0d6c46ac3815628e5391a29b01b419fd04ac9ec9c2ea3894c573e17b6cc44be
-
SSDEEP
12288:c1Nz7i4Yjm/eoyyHxl6GgZ1Ra1rN4wopVauKAxZkhwryINtTirdorXs:qz7ibj2jnl6hZDrp4XAx+hwrywTEdoo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9f04fd387a8dfa951ec24f3a4859beb_JaffaCakes118
Files
-
f9f04fd387a8dfa951ec24f3a4859beb_JaffaCakes118.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
Size: 120KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 71KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE