Static task
static1
Behavioral task
behavioral1
Sample
0262706a48611bce4bd19a7e470f4098_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0262706a48611bce4bd19a7e470f4098_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0262706a48611bce4bd19a7e470f4098_JaffaCakes118
-
Size
336KB
-
MD5
0262706a48611bce4bd19a7e470f4098
-
SHA1
ca54bdd697ee5d83ddd3160fecce51f48f55bc2e
-
SHA256
f4836512fcc889b07db6d76f92d91ca0450026f4222f5706e261ce5b098cdce3
-
SHA512
a307ad1b2250589228bdf7379d2dfdceb9ed3dbf68686712dbd01d01ba45080aa8869228994f42b4a89b27a8eb405ab6711d7dd708011d81df203f0dc273a30e
-
SSDEEP
6144:fS+4eEUsHtDA7qEO6wNIM78pewCF7L4LNYniWVZ1ncA1Mfa5nifpBk0RU+:fIx9HtDAM6tM8pJCdECnVPncA1Mfa5n0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0262706a48611bce4bd19a7e470f4098_JaffaCakes118
Files
-
0262706a48611bce4bd19a7e470f4098_JaffaCakes118.exe windows:0 windows x86 arch:x86
d5e0355f8764c235b38759b860077ceb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
user32
MessageBoxA
Sections
�����N Size: 269KB - Virtual size: 555KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����8� Size: 5KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����آ Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����h� Size: 512B - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����X� Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����H� Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: 24KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: 9KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
������ Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE