Static task
static1
Behavioral task
behavioral1
Sample
19b1ef52243d9eb67d59872970b1ce53_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
19b1ef52243d9eb67d59872970b1ce53_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
19b1ef52243d9eb67d59872970b1ce53_JaffaCakes118
-
Size
212KB
-
MD5
19b1ef52243d9eb67d59872970b1ce53
-
SHA1
5a6b7f101cbcb43c278ee4f916d8710b23e10321
-
SHA256
954f50be8810c7d138d0b295a720bb7e268afd23b6ceccf61413e4816ab89cd0
-
SHA512
c711df2b10509ef23c2ae196d70474667d52ee6ee5afd5c190e805e9d15c9cf87b1b552c8b97dd69a9b0fa8dc1f49cf79562c00d1eb19d45069f61d94ddb6806
-
SSDEEP
6144:cRxlIA8ugFFnrXfg6XM8Xx9mhzTxL7bVbksB:c6Ki5rY6z9mFxTFRB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19b1ef52243d9eb67d59872970b1ce53_JaffaCakes118
Files
-
19b1ef52243d9eb67d59872970b1ce53_JaffaCakes118.exe windows:5 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: 117KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
k8kli7i7 Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wkitb9.p Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
12.m3s64 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iu3kca5b Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9tk8k5or Size: 4KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE