Static task
static1
Behavioral task
behavioral1
Sample
0da452bc80851fb0fca0ea5878795b7a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0da452bc80851fb0fca0ea5878795b7a_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0da452bc80851fb0fca0ea5878795b7a_JaffaCakes118
-
Size
44KB
-
MD5
0da452bc80851fb0fca0ea5878795b7a
-
SHA1
c161e7a89aa96207c4f4ff4a80a62eb657c93aa3
-
SHA256
a1594b67cf2b7853cfbe296e1c079474585e4347cf07239862641a238f656efe
-
SHA512
1183c92ebb1178066b6b544fb5e9aaebcc2ca35dfb40226d23f8ab48ccd99919f6780a60823000e777717b0a5f5fee120c95cf893f6fa5c30073461b780b2ef9
-
SSDEEP
768:SZWNFyWDHX8pIE7H0rciPWzUQMhNZKV/GCUToazZyny5Im+44/hP8AcOU9ygVWzK:3HMpYFvZPCkoCzQ44JUAcOEtVFo+TC5o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0da452bc80851fb0fca0ea5878795b7a_JaffaCakes118
Files
-
0da452bc80851fb0fca0ea5878795b7a_JaffaCakes118.exe windows:4 windows x86 arch:x86
75b7603e2c9aeab507cc995644209e9e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetLastError
CreateMutexA
LoadLibraryA
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
wsprintfA
MessageBoxA
MessageBoxA
crtdll
atoi
ws2_32
recv
Sections
.data Size: - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jhtyff0 Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.jhtyff1 Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE