Static task
static1
Behavioral task
behavioral1
Sample
34e22dabd7026aeff0ae0d2c0a498a48_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
34e22dabd7026aeff0ae0d2c0a498a48_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
34e22dabd7026aeff0ae0d2c0a498a48_JaffaCakes118
-
Size
447KB
-
MD5
34e22dabd7026aeff0ae0d2c0a498a48
-
SHA1
be88cb157fb632e1b50071e7af0ecb9fd73cad18
-
SHA256
4100105c7115abd367c91a83d570e5149b5f4754e9a363bfb18f55cd370ea0e8
-
SHA512
ce304fdab9b2a00f6b65fdc88225d05cebe46ac2e1e210d128dab02b73bf377d9f221f67d181ea746856a6d4a2dd2b8ae0b41211466e0a8b1fbb76b8fb7690d5
-
SSDEEP
12288:h2bY3seSq6nGFa9pT8QM21fnouo8TO7w0bdapqHbadrq7PJkl3Ud:kbY3G8a9p4YfHxl0bdHG47RS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34e22dabd7026aeff0ae0d2c0a498a48_JaffaCakes118
Files
-
34e22dabd7026aeff0ae0d2c0a498a48_JaffaCakes118.exe windows:4 windows x86 arch:x86
1c2d3c56017ffc9f272aae4a4d190dcc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
MessageBoxA
comctl32
InitCommonControls
Sections
Size: 328KB - Virtual size: 684KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE