Static task
static1
Behavioral task
behavioral1
Sample
334a16ce16170777f50f63b87e6648c6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
334a16ce16170777f50f63b87e6648c6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
334a16ce16170777f50f63b87e6648c6_JaffaCakes118
-
Size
182KB
-
MD5
334a16ce16170777f50f63b87e6648c6
-
SHA1
6a9919870dcee98269ea92699c65cc3f1ce1cbe6
-
SHA256
594718da1fed39683267cb1300d54be559d468562d7b6965c1290d89e75342d7
-
SHA512
d84f5f39b57de49147b108337b9c6afbce9f014dd282bcc1876ada64ea1ed382c7b524606c67adc0092005839e82f2bd9b92427b8e090b3b7bf77cf28de2b950
-
SSDEEP
3072:qxauCbJhi1KTqXcL0HSYhvgP1gXiz733pqYAj/+FFeYweozX:qxauCGcYS0YeU3a+FgY9o7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 334a16ce16170777f50f63b87e6648c6_JaffaCakes118
Files
-
334a16ce16170777f50f63b87e6648c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zrsm4.74 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
g.mtpdiq Size: 144KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
c9h7tusc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ