Static task
static1
Behavioral task
behavioral1
Sample
0126f95297a862c289a39e3dcc213ccc_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0126f95297a862c289a39e3dcc213ccc_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0126f95297a862c289a39e3dcc213ccc_JaffaCakes118
-
Size
77KB
-
MD5
0126f95297a862c289a39e3dcc213ccc
-
SHA1
f3ea5eb5015db983c7653fbcd870d2029e8a9163
-
SHA256
228189b06b6ac6912fa0a02f39ad8a5b76a43e6fde85b74bbd78a805620c36fa
-
SHA512
017e65de523a8a4230914d98c2cbf548d88d892dfbd9da5303a76bc314ed20323b578e6636ba011f422958ba801cff826e3c7765060da075d62a04177c8628ce
-
SSDEEP
1536:B2qSnR61gcz0uztzrYQ8Qv45TED591XeyNCZ4vPnQ0+1JMFTCzoT28pG:pVzjzrYQkED9OyNCevPnQ0wJkCupG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0126f95297a862c289a39e3dcc213ccc_JaffaCakes118
Files
-
0126f95297a862c289a39e3dcc213ccc_JaffaCakes118.exe windows:0 windows x86 arch:x86
4bda570ce112adc211f3bd7fa6b82f33
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetModuleHandleA
GetProcAddress
VirtualProtect
msvcrt
malloc
user32
MessageBoxA
Sections
.text Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.QW0 Size: - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.QW1 Size: - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.QW2 Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiaohui Size: 6B - Virtual size: 6B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ