Static task
static1
Behavioral task
behavioral1
Sample
251ce74a5b232fb95a1ec97c8ad04298_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
251ce74a5b232fb95a1ec97c8ad04298_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
251ce74a5b232fb95a1ec97c8ad04298_JaffaCakes118
-
Size
92KB
-
MD5
251ce74a5b232fb95a1ec97c8ad04298
-
SHA1
5d4f74e5335088073578f0d5cbb74bfc7665e4be
-
SHA256
0f10f428cae4636769f06dc896dd18915245578de6fce1bd356ff0094131ea46
-
SHA512
cd40330aa25c5148b65e4392dc3c3605904d1ffa132b11ecaa395fab75094338a238d9fcfa14e7bb68cd5d0ca51044a2986aa1da58d8456fe39011dbcdeb8cb4
-
SSDEEP
1536:21T2lzKoEldn9OWcWRcVYzHO870sIBPVKf4P+b/0CG6axt:21+moEPnbcWRcYzT70pBPWlb/0tZx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 251ce74a5b232fb95a1ec97c8ad04298_JaffaCakes118
Files
-
251ce74a5b232fb95a1ec97c8ad04298_JaffaCakes118.exe windows:4 windows x86 arch:x86
bb01a0fc3b776b726f021c130629577a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
VirtualAlloc
VirtualFree
GetModuleHandleA
user32
MessageBoxA
Sections
�` Size: - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�p Size: - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
� Size: - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE