Static task
static1
Behavioral task
behavioral1
Sample
249ae5c78d7a46ce31064b3667b6a285_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
249ae5c78d7a46ce31064b3667b6a285_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
249ae5c78d7a46ce31064b3667b6a285_JaffaCakes118
-
Size
1.6MB
-
MD5
249ae5c78d7a46ce31064b3667b6a285
-
SHA1
95f0c7b09b86206fc71045f1a65b83e2e118183f
-
SHA256
12231855a7c86b8c8fdb2363e42da512715e22025205bd428054e142f3e956a0
-
SHA512
1173d84d4c814bf69717f614da2cb8b75ec342a63c5f584046ff7585c0d69b89b92d759a99dc3b9afb89d7e3b01e75cfc7a7d3680c6d714f392db4d81c1cb0b6
-
SSDEEP
49152:raC4OrsZFuFG1hHZBo/orFZaC1ORQWTJmIOH:raCKZGyhHZEorFZtR5Im
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 249ae5c78d7a46ce31064b3667b6a285_JaffaCakes118
Files
-
249ae5c78d7a46ce31064b3667b6a285_JaffaCakes118.exe windows:4 windows x86 arch:x86
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
Sections
CODE Size: 1.5MB - Virtual size: 13.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE