Static task
static1
Behavioral task
behavioral1
Sample
16685c184b5ea6e5332b46837a8ecf84_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
16685c184b5ea6e5332b46837a8ecf84_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
16685c184b5ea6e5332b46837a8ecf84_JaffaCakes118
-
Size
9.1MB
-
MD5
16685c184b5ea6e5332b46837a8ecf84
-
SHA1
f10a27be856ae790656869afac684fe54cd93576
-
SHA256
1bf3097fac0f379f690ea2d926d226458639eb0241fff2680e2284cc47e894a0
-
SHA512
567cb0152494e77a0d67ebe22d21f2dc68a7e5d88d04de8f5b6ea02fb49abff1e870103f908d73a1fa82d5f609699c2bb0c0ff89fbe006ce629145b40802bdd1
-
SSDEEP
98304:NLxGpCCpUFvzrz9+XNJEJgOogwBoSp6JlTgv76X9y9aKzq:ZxGpCCwYXwJgOip4sSoaKG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16685c184b5ea6e5332b46837a8ecf84_JaffaCakes118
Files
-
16685c184b5ea6e5332b46837a8ecf84_JaffaCakes118.exe windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: 348KB - Virtual size: 348KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
270tytgy Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8.0MB - Virtual size: 8.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
s6137xnc Size: 548KB - Virtual size: 548KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8g7pf81l Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ