Static task
static1
Behavioral task
behavioral1
Sample
22f45abb35645438e6b6d49b48a6f018_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
22f45abb35645438e6b6d49b48a6f018_JaffaCakes118
-
Size
375KB
-
MD5
22f45abb35645438e6b6d49b48a6f018
-
SHA1
41b1ac02fb191593a6c3a53dec502cfd68e4a638
-
SHA256
7e1d4edee146393f92439f6eed737bf29d86501f8d644366e76a60934f49e5c7
-
SHA512
109fe8250ff22fdb8d3fed7ab9192998a9486f9a0dd6fe3c37268cb6a71e929734cf296e5edae8781e50eef2e2dc758836519eff23df0207e5b20768d8a9cc77
-
SSDEEP
6144:cXlgsd7Cmmt3LSz0VkXNBfBzNy7VsQH0rrOlewMF66bfJS1ulnLLwCGU7a9yFlN1:WxN8LkakpzNqurlwq6SOuVLLwCGTKJka
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22f45abb35645438e6b6d49b48a6f018_JaffaCakes118
Files
-
22f45abb35645438e6b6d49b48a6f018_JaffaCakes118.exe windows:4 windows x86 arch:x86
46b0675c1fd7681c7b19a1c83d5aff83
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
user32
wsprintfA
MessageBoxA
Sections
.data Size: 290KB - Virtual size: 744KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.asprsc Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE