Static task
static1
Behavioral task
behavioral1
Sample
03dfd48b86daaec6871c3c0b956a0a1a_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
03dfd48b86daaec6871c3c0b956a0a1a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
03dfd48b86daaec6871c3c0b956a0a1a_JaffaCakes118
-
Size
734KB
-
MD5
03dfd48b86daaec6871c3c0b956a0a1a
-
SHA1
a501f82a4b22129946ca5ec91bc4c6e71a487336
-
SHA256
236fda9e5115205054354680ac52e46604f7a1cd2d015407c1d340b2e071d3c0
-
SHA512
ee44d6ae7b46aaf1a388719f886e3eada795ea10546c127d5fed19762ce4c9c820d903406e4a855fd80ed7c2105cb3adc0500a156c837b2938febd03f8965497
-
SSDEEP
12288:ih0frxkay8IwiVnv1qHLL4xjxZVUiMFchOMBQMuunaEkzkVuU3S3/gxsWQvarnsu:zf988IlVnv1qX4VvyiVIMBQMtnaPQVuH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03dfd48b86daaec6871c3c0b956a0a1a_JaffaCakes118
Files
-
03dfd48b86daaec6871c3c0b956a0a1a_JaffaCakes118.exe windows:5 windows x86 arch:x86
d613b16345f04ea93dc80355e39ef28b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
FreeEnvironmentStringsA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
MessageBoxW
advapi32
RegQueryValueExA
oleaut32
SysFreeString
wininet
InternetOpenUrlA
Sections
CODE Size: - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 656KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 732KB - Virtual size: 732KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 84B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ