Static task
static1
Behavioral task
behavioral1
Sample
21aa3e21a7f3b284b1581131d5dce84d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
21aa3e21a7f3b284b1581131d5dce84d_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
21aa3e21a7f3b284b1581131d5dce84d_JaffaCakes118
-
Size
628KB
-
MD5
21aa3e21a7f3b284b1581131d5dce84d
-
SHA1
70adb8211023447d0d02f722f0176a1689c621c7
-
SHA256
1d47efc5276d4f36aea44c747645225c10096723ca1d8b2a47fa47bd58f792ba
-
SHA512
60c8d48793421d3c0ce4d9ef807bb0dd191b8a84f37d654146d15e86793576cc765c0fa1075d1238677e9570afce81261bd35e0deda7b34d9b79ee1165c8c334
-
SSDEEP
12288:Xk/x9nqfaW5dYBH+vj8YBr3aa9hoa7CVHTmz5LRTwom+e:UJcfV3KI8YBrphoa7KTmz5dT9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21aa3e21a7f3b284b1581131d5dce84d_JaffaCakes118
Files
-
21aa3e21a7f3b284b1581131d5dce84d_JaffaCakes118.exe windows:4 windows x86 arch:x86
aadf5c8667fe05f652d8f2e502e2b9d7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
GetModuleHandleA
GetProcAddress
Sections
.text Size: 388KB - Virtual size: 387KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 212KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ