Static task
static1
Behavioral task
behavioral1
Sample
167626edf9402e548e39e40efa47d01e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
167626edf9402e548e39e40efa47d01e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
167626edf9402e548e39e40efa47d01e_JaffaCakes118
-
Size
254KB
-
MD5
167626edf9402e548e39e40efa47d01e
-
SHA1
0b267b37f820df92671a55919f0361eb0efc6e5b
-
SHA256
a17877e4c8deed06049e9e917c3214ac64702acd5bba16d2327925b6167a06df
-
SHA512
ee6c79b7891270c42b6c067adcff053870321b1cee387f45df93ddc0c773118b98336191ed9f4b394576ec4f44eadf0ce71e47138c0a16dddb50881b9dd1bec2
-
SSDEEP
6144:jkfUpuJkP9E0FZE1WYvj0Xk3V7zJPGEsPllTvd0:rpU6nFZSr0Xk3TyXd0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 167626edf9402e548e39e40efa47d01e_JaffaCakes118
Files
-
167626edf9402e548e39e40efa47d01e_JaffaCakes118.exe windows:5 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
a.44apk. Size: - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ig4fj8f4 Size: 248KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
adbhy40o Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ