Static task
static1
Behavioral task
behavioral1
Sample
fa4cfacdece58c395482dbf4cfb90d93_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa4cfacdece58c395482dbf4cfb90d93_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fa4cfacdece58c395482dbf4cfb90d93_JaffaCakes118
-
Size
498KB
-
MD5
fa4cfacdece58c395482dbf4cfb90d93
-
SHA1
50c22d0fbd2007b88be9ee35f5601daf6876ca37
-
SHA256
000973f23c6767acc2f00c19aa8c5ed4f3cacfd9b995f1de1f651aa5237d2fe1
-
SHA512
026675e6b7854b1b7b79d37a81e3d9eb805d8a841b0ad42260a452b12bd506321121990cf97817a1173a9381839712e3691f93c09bcc1d117982677316da38b3
-
SSDEEP
12288:gelIVXVo6JoK/t9AFoxYo8JaOvvWtI2q9vk:gIcUK7aoxYTvhv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa4cfacdece58c395482dbf4cfb90d93_JaffaCakes118
Files
-
fa4cfacdece58c395482dbf4cfb90d93_JaffaCakes118.exe windows:1 windows x86 arch:x86
e235a9ab173d958bd1d241507fc028a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
user32
MessageBoxA
Sections
CODE Size: - Virtual size: 620KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vf53ni35 Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vjulxnme Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hikdgvd8 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vvpt5g.p Size: - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
64wvajkx Size: 490KB - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE