Static task
static1
Behavioral task
behavioral1
Sample
197bc8098d468c90771f8fd158e41e8e_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
197bc8098d468c90771f8fd158e41e8e_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
197bc8098d468c90771f8fd158e41e8e_JaffaCakes118
-
Size
520KB
-
MD5
197bc8098d468c90771f8fd158e41e8e
-
SHA1
ecc8e4804b54e78b552a60be89242563c5381ce3
-
SHA256
e192a242b547a49e70dd6de73ac972d034b3e74c128bbaa23db9e9b1e4483375
-
SHA512
23f28051787f1bb5b7a5f1847bda7de0ffaab4d4621dc290c8c4b8ff10822cb6de667e1b7206b59abd0d085d3cfd830facee412e0918915420ce07885345f9c0
-
SSDEEP
12288:ty73RBMd12tF+5Za/3EFLPZw5dvuAYvFVYKbv+Ph/uZE:07huj2tE5ZbFLP7Dbv+Ph/u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 197bc8098d468c90771f8fd158e41e8e_JaffaCakes118
Files
-
197bc8098d468c90771f8fd158e41e8e_JaffaCakes118.exe windows:1 windows x86 arch:x86
1c2d3c56017ffc9f272aae4a4d190dcc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
MessageBoxA
comctl32
InitCommonControls
Sections
DOLTON Size: 321KB - Virtual size: 664KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DOLTON Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DOLTON Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DOLTON Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DOLTON Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DOLTON Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DOLTON Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 139KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DOLTON Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE