Static task
static1
Behavioral task
behavioral1
Sample
4a2510262ce5c73707069d23d71e3fd9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4a2510262ce5c73707069d23d71e3fd9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a2510262ce5c73707069d23d71e3fd9_JaffaCakes118
-
Size
101KB
-
MD5
4a2510262ce5c73707069d23d71e3fd9
-
SHA1
40d49e0afd12c478fb71adb9162a18633d0ceb23
-
SHA256
94b06355324cf06c657f88523c3c68a94e677d69a1e6bab289fd91dcaaa34df6
-
SHA512
24d9152bf3113af59190992edf44ffbd422aaa72933c1e690e7dfdd8e57837e398deccf44a7bb9001af838f2adbc971e155a3e4a0b1b020aeabb961a171c8d5f
-
SSDEEP
1536:+yc27rXWHLFqYpC7SRSaS0CxwVWSRTtzTWgKshzDVgKZDdPu:+y/zmAYpC7taS/NSjzigKshzhgKRdPu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a2510262ce5c73707069d23d71e3fd9_JaffaCakes118
Files
-
4a2510262ce5c73707069d23d71e3fd9_JaffaCakes118.exe windows:1 windows x86 arch:x86
7721ab6c673174c1b2b675c6e9a42d4b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
user32
MessageBoxA
crtdll
_iob
_itoa
__GetMainArgs
_stricmp
_strnicmp
abort
exit
fputc
fwrite
localeconv
memcpy
memmove
memset
pow
raise
signal
strcat
strchr
strtol
wcslen
wctomb
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 608B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 88B - Virtual size: 88B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 784B - Virtual size: 784B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE