Static task
static1
Behavioral task
behavioral1
Sample
485c7847d5d914b1b451caeda1bd976a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
485c7847d5d914b1b451caeda1bd976a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
485c7847d5d914b1b451caeda1bd976a_JaffaCakes118
-
Size
384KB
-
MD5
485c7847d5d914b1b451caeda1bd976a
-
SHA1
d468f96d572becec8af232ff8352480f42a05b71
-
SHA256
acab7c04903bc4e7bd061b6b340515649453e047e7d97c1281ee7671df6f9818
-
SHA512
f34ccfcb02020af3f358e75b77e7c39337e224280c7dc0e2bca9a0a3fb02a8d1a852022de0863a3b92efb52ed0e6dd2f34b8957b58ede893e20299e1f4623046
-
SSDEEP
6144:wZNrZ25Ikeb+1f7JIBrJmzQDJgpCao4FrH9cVhBTKQ7R1iBj/AQEM2Jqif+E8eUR:KrZ25ITudIBrJFp4BHUWQ7GbAY2JdySW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 485c7847d5d914b1b451caeda1bd976a_JaffaCakes118
Files
-
485c7847d5d914b1b451caeda1bd976a_JaffaCakes118.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
Size: - Virtual size: 316KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 245KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE