Static task
static1
Behavioral task
behavioral1
Sample
334a9e954017d77785c22d29c6c0e53b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
334a9e954017d77785c22d29c6c0e53b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
334a9e954017d77785c22d29c6c0e53b_JaffaCakes118
-
Size
341KB
-
MD5
334a9e954017d77785c22d29c6c0e53b
-
SHA1
ec3054339b476d2e1fe4be8bf4be4515cb19e2bb
-
SHA256
06a35f0c09cfed6a461ee54da9b378ce2e8b5cafe402c74b34e073deae511d8c
-
SHA512
5adc590d688c21297d1e4d8cbd59d881888499c39caa9f008d3fddc845b683946f0ff670a34161fda7b5c5fccffa34dc08491d181998e06cd978164e7c40711d
-
SSDEEP
6144:pQHraB9TEjh697gBzRkR5Un94+trBh8WB0ff:qaB9TEESzRkLUnG+XiIuf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 334a9e954017d77785c22d29c6c0e53b_JaffaCakes118
Files
-
334a9e954017d77785c22d29c6c0e53b_JaffaCakes118.exe windows:4 windows x86 arch:x86
1c372311534116eeffdf56f3f6c69c5c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
ExitProcess
GetProcAddress
user32
wsprintfA
MessageBoxA
Sections
CODE Size: 208KB - Virtual size: 420KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sinaps Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE