Static task
static1
Behavioral task
behavioral1
Sample
31415d44fe227e858b2faccc7fa21bcc_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
31415d44fe227e858b2faccc7fa21bcc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
31415d44fe227e858b2faccc7fa21bcc_JaffaCakes118
-
Size
236KB
-
MD5
31415d44fe227e858b2faccc7fa21bcc
-
SHA1
a6b6f4ccea212a015dcb2af8a5659e90b1887b65
-
SHA256
f129c931a211aa1b5cc5f4a59558c207eacab4f4fef3e57f91d10df7bf72fc88
-
SHA512
1867c590fd3d686d6e85795681e1d98f45c6f1efd99a9b226b09db14df8f53f670776d296523d3a07229ba0fc5acfe005672ba8878bdd1854306ead663a21009
-
SSDEEP
6144:DJBLuyC0zYOR3eH+nPHVq4iKUP49Nff9BwdVUR17q4yfUrF3tx:DeD1OMH+t2Q9NXqUXcwj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31415d44fe227e858b2faccc7fa21bcc_JaffaCakes118
Files
-
31415d44fe227e858b2faccc7fa21bcc_JaffaCakes118.exe windows:5 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: 138KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
v6nxgapt Size: - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fvpjz3rj Size: 96KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
v25xtvjs Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ